troubleshooting Question

Is there a way or a program available that can tell you who modified or created a file/folder on a Microsoft OS based machine?

Avatar of lonmorey
lonmorey asked on
Security
2 Comments2 Solutions238 ViewsLast Modified:
I need to know who last modified or created a file on a Microsoft based machine or Network share.  For instance, someone installed a program on my server and all my helpdesk technicians claim ignorance.  Another example: I get a call from a user who wants to know the person that last modified an Excel Spreadsheet on a Microsoft Network shared drive.

I know of Microsoft object auditing but for obvious reasons this method is impractical for monitoring thousands of files.

I have seen this work on a Netware based network but since we migrated to Windows Server I have not seen anything close to it.
ASKER CERTIFIED SOLUTION
bkd3019

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros