Solved

Who modified the file last?

Posted on 2004-08-17
2
456 Views
Last Modified: 2010-08-05
Hi all - thank you in advance for your help with this!

I'm running Windows 2003 with AD - my request seems simple, yet I've been unable to find it on any site, including searching around experts-exchange.

In Netware, you can easily see who last modified a file, as well as who deleted a file.  Is there a way to track this information on Server 2003, or find it?  I would assume it would be under Properties, but I don't see it anywhere.  

Any help would be appreciated!
0
Comment
Question by:Scudboy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 9

Expert Comment

by:robinluo
ID: 11825004
In windows you will have to enable auditing on the files you want to monitor, configure what action on the file you want to audit, and pick up the result from event viewer.

You can enable auditing from the Properties > Security > Advance button > Auditing tab
0
 
LVL 16

Accepted Solution

by:
mdiglio earned 500 total points
ID: 11830125
Hello,

Robinluo is correct but you must also enable auditing through group policy:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\audit object access
It is not as convenient and straight forward as Netware.
Setting up a filter in event viewer will help narrow it down.
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question