Mortaza Doulaty
asked on
Log USB Storage device pluging
I just need to know which usb storage devices (e.g. flash disk, cool disks, etc.) are plugged to my computer in Windows XP or Vista. (some log files with time and/or date stamps)
As far as I know, in Windows 2000, in event log, there were some entries for usb devices.
I want to know how it is possible in Windows XP or Vista?
As far as I know, in Windows 2000, in event log, there were some entries for usb devices.
I want to know how it is possible in Windows XP or Vista?
ASKER
I've tested it before, but there was no entries for "Removable storage services".
I've tested it on a newly installed windows xp sp3 too.
Is there any option to enable logging removable storage devices?
I've tested it on a newly installed windows xp sp3 too.
Is there any option to enable logging removable storage devices?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
>>I want to know how it is possible in Windows XP or Vista?
No third party tools, I've already seen such tools. I need to know whether this is possible with out using any third-party tools.
No third party tools, I've already seen such tools. I need to know whether this is possible with out using any third-party tools.
to my nolage Event Viewer is the only place where you have logs stored on your pc.
Thats probably why you have USB sniffer programs..
Thats probably why you have USB sniffer programs..
so my answere is that is not possible to see usb connections from a log.file
ASKER
Thanks for your comments.
Let me have two or three days waiting for other expert's comment. Then I'll finalize this question.
Let me have two or three days waiting for other expert's comment. Then I'll finalize this question.
I think I have an app at home that may work for you, can't remember the name / version / web site off the top of my head. I'll get back with you tonight.
ASKER
Dear ednetman,
Thanks for your comment.
Thanks for your comment.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Under Applications you will have all the "Removable storage services" who have started and stopped with date and time