How can I prove which PC/User a specific index.dat file came from?

I need to somehow archive an index.dat file for legal purposes, and would rather not leave it on the PC itself just in case something happens to it. I know I can copy if off, but how can I retain information on where it came from. Is there something within the index.dat file that shows which user / mac address / anything that this file was copied from?
cshoAsked:
Who is Participating?
 
jkrConnect With a Mentor Commented:
>>Is there something within the index.dat file that shows which user / mac
>>address / anything that this file was copied from?

Copy it together with the ACL information (xcopy /O), then the owner information will persist.
0
 
fpthreeCommented:
Well there are several viewers out there that will allow you to export the data into an excel format.
I'm not sure if Index.dat files carry over anymore information then which user is accessing the site.
Typically, it's associate with the users profile and not the hardware of the machine the user is accessing it from. If you're interested in a few viewer, finder and exporter of index.dat files I would recommend http://www.stevengould.org/software/indexdatspy/download.html it's a standup piece and doesn't install anything more then the program.
0
 
Asta CuCommented:
That's a tough one, since there are numerous ways that users may impact your success.  This general google search shows you some of them.....
http://www.google.com/search?hl=en&q=audit+index.dat
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
fpthreeCommented:
It will also show you records of applications indexed by the user profile.
0
 
fpthreeCommented:
yeah -
I guess you can right a batch file or VB script or adm to the users profile logon/script.
write the script to xcopy /O such as jkr suggested and the attributes of the file will carry over to it's destination. However, isn't that switch only supported by Windows 2000? Just curious.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.