Solved

last access user

Posted on 2008-09-30
8
312 Views
Last Modified: 2010-05-18
I need to know the last user to access or change an MS DB without opening it.  TreeSize is an excellent tool, but only tells me last access date and owner name.  
0
Comment
Question by:moransa
  • 4
  • 3
8 Comments
 
LVL 26

Expert Comment

by:lnkevin
ID: 22608603
What is MS DB? MS Access or SQL?
How does user access to the DB? from an application or directly?
Would folder audit help? or some tool like this:
http://www.apexsql.com/sql_tools_audit.asp

K
0
 

Author Comment

by:moransa
ID: 22608648
Access.  Looks like this tool is for SQL and costs dollas =(
0
 
LVL 26

Accepted Solution

by:
lnkevin earned 500 total points
ID: 22608953
It it's Access, set folder audit to see who is accessing to the folder that contain DB file. It will not cost you a cent.

http://technet.microsoft.com/en-us/library/cc784387.aspx

You want to set local security setting as the following on your server:
Local Security Setting --> Local Policies --> Audit Policy --> Audit account login event --> Check Failure option only
Check your Event Viewer Security Logs for the audit result

K
0
 

Author Comment

by:moransa
ID: 22609034
That would work, but I need to see historical access.  Some of these DBs are rarely used, so if I did this, I'd have to wait for the users to hit it again, could be months.  
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 26

Expert Comment

by:lnkevin
ID: 22609165
Yep, the set up is good for the future since there is nothing has set in the past. This theory is applied to all software means you have to set it up before audit it. Here is another link that has a clearer instruction same as the above in snapshot image:
http://articles.techrepublic.com.com/5100-10878_11-5034308.html

K
0
 

Author Comment

by:moransa
ID: 22610788
Right, but I need something that will tell me the last access.  Going forward might be an option, but I need to know who has already accessed it.  
0
 
LVL 4

Expert Comment

by:BMPTS
ID: 22699166
look at your security logs on the server \ hosting machine.  this will tell you who had privileged access (if you are auditing privileged access). cross reference to the date modified.  If you are not auditing those type of events, then turn it on and wait for access again.
0
 

Author Closing Comment

by:moransa
ID: 31501615
This was the answer, now I just have to wait for them to take the bait.  
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Usually shares are where we want them for our users and we tend to take them for granted. There are times, however, when those shares may disappear causing difficulty for your users. One of the first things to try is searching for files that shou…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
This video discusses moving either the default database or any database to a new volume.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now