Solved

Changes to a file on a Window network- trackable?

Posted on 2009-04-13
7
244 Views
Last Modified: 2012-05-06
Where I work we each have a folder on a shared drive.  I had a powerpoint file to which someone made some changes to and those changes (that no one will admit to)ruined a presentation.  Is there a way this can be tracked back to a windows user?  IS there a log somewhere that records who saves or edits files on a network?

We have XP clients, not sure what server software but I think Win Server 2003.

Thanks!
0
Comment
Question by:snyperj
  • 3
  • 2
  • 2
7 Comments
 
LVL 8

Accepted Solution

by:
sjl1986 earned 250 total points
ID: 24130745
I'm unaware of any such reporting tool. There's always the less honest way which is to announce that a copy of the original file has been recovered and whoever broke it needs to come forward for training so it doesn't happen again. Since you don't know if it was on purpose, can you really reprimand the employee for an accident? The best thing you can do is make sure your employees have the necessary skills to do their job and if your company offers it, have them trained so it doesn't happen again. Also, it's always a good idea to create incremental backups of all files located on workstations and servers for scenarios like this one.
0
 

Author Comment

by:snyperj
ID: 24130766
Thanks- I'm not looking to reprimand, nor am i even in a postion to ... I just want to know for my own purposes...
0
 
LVL 8

Expert Comment

by:sjl1986
ID: 24130856
Understood. The only thing I could think of would be to look into your server auditing and try to match up some sort of dates/times with the last modified date on the Powerpoint file. The chances of finding a conclusive comparison are probably slim to none. Sorry I can't be of more help.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:snyperj
ID: 24130870
I remember on our old Novell network it could tell you the last person to access and save a file.  I didn't realize windows didn't do that...
0
 
LVL 24

Assisted Solution

by:Echo_S
Echo_S earned 250 total points
ID: 24131395
If you open the PPT file, in the document properties there's a "last saved by" on the Statistics tab. The number of revisions and total editing time is not reliable*, but I would assume the "last saved by" is. Can't say for sure, though. Since I don't know the version of PPT you're using, I can't steer you to the document properties...care to share?

*at least, this was the case in versions of PPT prior to 2007. I'm not sure about it in 2007. And I think the longer the file's been around and the more versions of PPT it's been opened in, the less reliable it is.
0
 
LVL 8

Expert Comment

by:sjl1986
ID: 24131558
Based off Echo's comment. I went into a Powerpoint file I had and clicked on Tools > Shared Workspace. On the right side a menu popped open and had some icons at the top. I clicked on the blue circle with the white "i" in it for information and it showed my first name and the date as the last modification. This appeared also to work in Excel in the same way. I have Office 2003 and am also unsure about 2007 but I imagine if you can find the menu it would be the same. Hope this helps. Thanks Echo for the info.
0
 
LVL 24

Expert Comment

by:Echo_S
ID: 24131779
In 2007, turn on the developer tab by going to office button | ppt options and checking the option for the developer tab.

Then, on the Developer Tab, turn on Document Panel. Then choose Advanced and go to the Statistics tab.

In 2003, I think it's under File | Properties or some such.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Have you ever set up your wireless router at home or in the office to find that you little pop-up bubble in the bottom right-hand corner of Windows read "IP Conflict - One of more computers on the network have been assigned the following IP address"…
This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now