troubleshooting Question

Is there a way or a program available that can tell you who modified or created a file/folder on a Microsoft OS based machine?

Avatar of lonmorey
lonmorey asked on
2 Comments2 Solutions238 ViewsLast Modified:
I need to know who last modified or created a file on a Microsoft based machine or Network share.  For instance, someone installed a program on my server and all my helpdesk technicians claim ignorance.  Another example: I get a call from a user who wants to know the person that last modified an Excel Spreadsheet on a Microsoft Network shared drive.

I know of Microsoft object auditing but for obvious reasons this method is impractical for monitoring thousands of files.

I have seen this work on a Netware based network but since we migrated to Windows Server I have not seen anything close to it.

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 2 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 2 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros