Solved

File Tracking

Posted on 2008-10-13
6
791 Views
Last Modified: 2008-11-11
Dear All:

I need to be able to track user's acess to files and determine whether or not they copy the files to another PC or media, etc. The OS is Win XP and work in Workgroup ( no domain), and I need track the history also(exp: if he did already, where I can find the log).

Best Regards,

Andy
0
Comment
Question by:andynanpa
6 Comments
 
LVL 6

Accepted Solution

by:
MrNiss99 earned 125 total points
ID: 22707260
I would turn on auditing via local group policy, the policy is object access.

Security Settings/Local Policies/Audit Policy


http://technet.microsoft.com/en-us/library/cc787268.aspx#BKMK_1

0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 125 total points
ID: 22707267
File Auditing can tell you when they access or delete a file but it cannot tell you specifically when they copy it and you won't be able to tell if they may open a file and then "save as" to another disk.  Further, if it's already happened and you didn't have auditing enabled, then there is no way to know unless the person you're suspicious of tells you or you can search every device they may have potentially used to copy the information - including webmailing it themselves.  You would need third party software to do this.  One products that can do this but REQUIRES a domain is DriveLock.  I just saw a demo of DriveLock this past Thursday and it looked fantastic.  There's a minimum of 10 licenses but it allows EXTENSIVE control and options for tracking this sort of thing AND preventing it.  If the data your trying to protect could cost your company $1000 or more, then the license fee for even a single workstation is well worth it... though again, you NEED Active Directory.

http://www.drivelock.com/
0
 
LVL 28

Assisted Solution

by:chilternPC
chilternPC earned 125 total points
ID: 22707298
no, possible with your current set up. the only auydit trail will not be that finer detail - ese the event viewer (control panel. administrator tools - event viewer) and choose what events to look at.

if you want to see who copies files around and when you will need to implement a version control system , kinda like a library where people have to check files in and out. and thehistroy is kept as to eho took the file out and did what to it.

0
 

Assisted Solution

by:lulee5555
lulee5555 earned 125 total points
ID: 22716377
How about FileSure by www.bystorm.com. Works well for me. You can download the free trial.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question