File Tracking

Dear All:

I need to be able to track user's acess to files and determine whether or not they copy the files to another PC or media, etc. The OS is Win XP and work in Workgroup ( no domain), and I need track the history also(exp: if he did already, where I can find the log).

Best Regards,

Andy
andynanpaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MrNiss99Commented:
I would turn on auditing via local group policy, the policy is object access.

Security Settings/Local Policies/Audit Policy


http://technet.microsoft.com/en-us/library/cc787268.aspx#BKMK_1

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Lee W, MVPTechnology and Business Process AdvisorCommented:
File Auditing can tell you when they access or delete a file but it cannot tell you specifically when they copy it and you won't be able to tell if they may open a file and then "save as" to another disk.  Further, if it's already happened and you didn't have auditing enabled, then there is no way to know unless the person you're suspicious of tells you or you can search every device they may have potentially used to copy the information - including webmailing it themselves.  You would need third party software to do this.  One products that can do this but REQUIRES a domain is DriveLock.  I just saw a demo of DriveLock this past Thursday and it looked fantastic.  There's a minimum of 10 licenses but it allows EXTENSIVE control and options for tracking this sort of thing AND preventing it.  If the data your trying to protect could cost your company $1000 or more, then the license fee for even a single workstation is well worth it... though again, you NEED Active Directory.

http://www.drivelock.com/
0
Peter HartCommented:
no, possible with your current set up. the only auydit trail will not be that finer detail - ese the event viewer (control panel. administrator tools - event viewer) and choose what events to look at.

if you want to see who copies files around and when you will need to implement a version control system , kinda like a library where people have to check files in and out. and thehistroy is kept as to eho took the file out and did what to it.

0
lulee5555Commented:
How about FileSure by www.bystorm.com. Works well for me. You can download the free trial.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.