Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Moving files/folders...

Posted on 2009-05-05
8
480 Views
Last Modified: 2012-06-21
I have a frequent problem where users of my domain are accidently moving files and folders contained in shared folders on our server.  All users must have access to these folders, and must be able to perform read/write, but I would love to be able to stop block movement of items, or to at least be able to track these changes so I can properly train whoever is moving files/folders.

Any advice?
0
Comment
Question by:MrBookins
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 16

Expert Comment

by:warturtle
ID: 24305178
The most basic way of tracking who is currently logged into the system and using shared folders is via Computer Management applet. Right-click on My Computer and select Manage. That will open the applet. Then you can click on Shared Folders/Shared Sessions to see who is logged on and in what shared folder.

I am sure that there are better methods of doing that, which other experts will suggest. I will also think of more options.
0
 
LVL 1

Author Comment

by:MrBookins
ID: 24305215
I know who is using these directories.  Realistically, everyone in the domain is in those folders throughout the day.  I am  trying to track who is moving my files and folders, or I just want to block them.  We have a rather large file system, so it might be several days before anyone notices that a file/folder has been moved, so checking the Shares/Sessions will not give me relevant information.

Any other thoughts?
0
 
LVL 16

Expert Comment

by:warturtle
ID: 24305269
Can you not just give read access to those folders that are being moved around and need to be blocked? You can remove the write access and let the users only copy stuff to their local computers to work on.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 16

Expert Comment

by:speshalyst
ID: 24305600
If you want to Audit Object access , you have have Audit enabled on these folders.
you can do that by going to the folder properties\security\advanced(button)\audit..
once you enable this, you can look at the Security Event Log to find out who accessed these folder objects.. but lemme warn you this will generate huge log files.. of you have everyone accessing these folders all day long
 
0
 
LVL 33

Expert Comment

by:Todd Gerbert
ID: 24305743
You can also get Process Monitor from www.sysinternals.com, and set filter to: Process Name = System, Operation = IRP_MJ_SET_INFORMATION, Event Class = File System, Detail contains "Delete", Path begins with "D:\Some\Interesting\Folder"

This should show you all deletions.

Also, you can deny (using advanced NTFS) the ability to delete and keep ability to create/modify files, however that would also prohibit ability to rename.
0
 
LVL 1

Author Comment

by:MrBookins
ID: 24306091
speshalyst:
   
    I don't see an option for auditing the movement/copying of files and folders... Am I missing something?

tgerbert:

    Does Windows register the movement of files/folders as a deletion?  

Thanks for the suggestions, guys.
0
 
LVL 33

Accepted Solution

by:
Todd Gerbert earned 250 total points
ID: 24308700
Yes, a move is a copy operation followed by a delete.

0
 
LVL 1

Author Closing Comment

by:MrBookins
ID: 31578034
Great!  Thanks for the help!
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question