[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1297
  • Last Modified:

Log USB Storage device pluging

I just need to know which usb storage devices (e.g. flash disk, cool disks, etc.) are plugged to my computer in Windows XP or Vista. (some log files with time and/or date stamps)

As far as I know, in Windows 2000, in event log, there were some entries for usb devices.

I want to know how it is possible in Windows XP or Vista?
0
Mortaza Doulaty
Asked:
Mortaza Doulaty
  • 4
  • 4
  • 2
2 Solutions
 
TomMicrosoft ISV PartnerCommented:
Control panel - Administrative tools - Event Viewer
Under Applications you will have all the "Removable storage services" who have started and stopped with date and time
0
 
Mortaza DoulatyAuthor Commented:
I've tested it before, but there was no entries for "Removable storage services".
I've tested it on a newly installed windows xp sp3 too.

Is there any option to enable logging removable storage devices?
0
 
TomMicrosoft ISV PartnerCommented:
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Mortaza DoulatyAuthor Commented:
>>I want to know how it is possible in Windows XP or Vista?

No third party tools, I've already seen such tools. I need to know whether this is possible with out using any third-party tools.
0
 
TomMicrosoft ISV PartnerCommented:
to my nolage Event Viewer is the only place where you have logs stored on your pc.
Thats probably why you have USB sniffer programs..
0
 
TomMicrosoft ISV PartnerCommented:
so my answere is that is not possible to see usb connections from a log.file
0
 
Mortaza DoulatyAuthor Commented:
Thanks for your comments.

Let me have two or three days waiting for other expert's comment. Then I'll finalize this question.
0
 
ednetmanCommented:
I think I have an app at home that may work for you, can't remember the name / version / web site off the top of my head.  I'll get back with you tonight.
0
 
Mortaza DoulatyAuthor Commented:
Dear ednetman,

Thanks for your comment.
0
 
ednetmanCommented:
@Mortaza_doulaty

Ok, try USBDeview v1.27

http://www.nirsoft.net/utils/usb_devices_view.html

From the site:
"USBDeview is a small utility that lists all USB devices that currently connected to your computer, as well as all USB devices that you previously used.
For each USB device, extended information is displayed: Device name/description, device type, serial number (for mass storage devices), the date/time that device was added, VendorID, ProductID, and more...
USBDeview also allows you to uninstall USB devices that you previously used, and disconnect USB devices that are currently connected to your computer.
You can also use USBDeview on a remote computer, as long as you login to that computer with admin user."

It has command line options and can be run against remote machines.  Best of all, it's free!

Also check out the VolMouse utility....  I use it all the time and LOVE IT!  This guy writes a lot of great utilities.

~Ed
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 4
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now