How to make log file for files being copied to USB stick

I want to make log file for things being copied from workstation to USB Storage device.
Whatever things being copied to usb device should be logged in a file.

i.e., If user copied a file named abc.txt from local dirve,( path: "c:\abc.txt"), this file name along with path must be recorded.
Is it possible? If yes, how to acheive it.

Note: Workstations(Win 7, Vista & XP) are connected in domain architecture, working with Win server 2008 Std. Edition R1.
cybersakAsked:
Who is Participating?
 
Rob KnightConnect With a Mentor ConsultantCommented:
Hi,

I believe Lumension produce a product which will audit and control what you want:

http://www.lumension.com/device-control-software/usb-security-protection.aspx

Regards,


RobMobility.
0
 
ibbz-auCommented:
you are talking about a logging software -- this will have to be some third party application or something that needs to be coded.
0
 
MalajloCommented:
Use something like...
xcopy *.pdf c:\temp\*.* /s /e > log.log

You'll get a file like
C:URN_NBN_SI_DOC-W0N0RXYN.pdf
C:URN_NBN_SI_DOC-WFQVGUDN.pdf
C:3\R1101-001.pdf
C:3\R1101-002.pdf
4File(s) copied
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

 
MalajloCommented:
Oh, you need something behind to audit copying...
0
 
cybersakAuthor Commented:
S, i need some auditing tool to monitor my usb port for data transfer.
0
 
Rob KnightConsultantCommented:
Hi,

These products may also be of interest:

http://www.advansysusa.com/products_usb_standard.html

Is it just the one workstation or are you looking for an Enterprise solution?

Regards,


RobMobility.
0
 
FireW0lfCommented:
If your corp can afford it go with RobMobilitys solution.

We use Lumension at our corp, and "shadow copying" (tracking files copied to/from removable storage) is just one of the things it does very well

Oh, and with shadowing you have 2 main options - log the filenames / time / date of copy, or the server takes a copy of the actual files being copied - in case you need to investigate further
0
 
cybersakAuthor Commented:
Tkz dudes, I'll try it & get u back.
Tkz for ur response
.
0
 
morganmceCommented:
Verdasys's Digital Guardian also provides what you're looking for (and a whole lot more)

http://www.verdasys.com/data_loss_prevention.php

It's pretty comprehensive at logging what's happening your data.
0
 
Cris HannaCommented:
You don't mention if the domain is Server 2003 or 2008, but you can setup auditing of file access in Server 2008 natively  http://www.techotopia.com/index.php/Auditing_Windows_Server_2008_File_and_Folder_Access

Do you want to allow everyone to copy to removeable media, prevent everyone, or somewhere in between?  This can be accomplished with Group Policies  http://www.petri.co.il/disable_usb_disks_with_gpo.htm
0
 
cybersakAuthor Commented:
Tkz, CrisHanna_MVP.
I agree with ur solution.
I'm using Server 2008 and not r2.
If auditing, all the events will be logged,
What i need is only copying file to USB should be logged. B'cos, some of clients to my org. were small/entry level business peoples they don't have sys. admins. So, i've to make this task in easy way to access.
0
 
MalajloCommented:
Nasty solution - disable USB access and grant access to only one person.
0
 
cybersakAuthor Commented:
I was forced to buy a 3rd party to have solutions.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.