Solved

How to make log file for files being copied to USB stick

Posted on 2011-03-21
17
637 Views
Last Modified: 2013-11-08
I want to make log file for things being copied from workstation to USB Storage device.
Whatever things being copied to usb device should be logged in a file.

i.e., If user copied a file named abc.txt from local dirve,( path: "c:\abc.txt"), this file name along with path must be recorded.
Is it possible? If yes, how to acheive it.

Note: Workstations(Win 7, Vista & XP) are connected in domain architecture, working with Win server 2008 Std. Edition R1.
0
Comment
Question by:cybersak
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +5
17 Comments
 

Expert Comment

by:ibbz-au
ID: 35186667
you are talking about a logging software -- this will have to be some third party application or something that needs to be coded.
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35187205
Use something like...
xcopy *.pdf c:\temp\*.* /s /e > log.log

You'll get a file like
C:URN_NBN_SI_DOC-W0N0RXYN.pdf
C:URN_NBN_SI_DOC-WFQVGUDN.pdf
C:3\R1101-001.pdf
C:3\R1101-002.pdf
4File(s) copied
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35187210
Oh, you need something behind to audit copying...
0
Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

 

Author Comment

by:cybersak
ID: 35188122
S, i need some auditing tool to monitor my usb port for data transfer.
0
 
LVL 25

Accepted Solution

by:
RobMobility earned 250 total points
ID: 35188563
Hi,

I believe Lumension produce a product which will audit and control what you want:

http://www.lumension.com/device-control-software/usb-security-protection.aspx

Regards,


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 35188581
Hi,

These products may also be of interest:

http://www.advansysusa.com/products_usb_standard.html

Is it just the one workstation or are you looking for an Enterprise solution?

Regards,


RobMobility.
0
 
LVL 4

Expert Comment

by:FireW0lf
ID: 35188739
If your corp can afford it go with RobMobilitys solution.

We use Lumension at our corp, and "shadow copying" (tracking files copied to/from removable storage) is just one of the things it does very well

Oh, and with shadowing you have 2 main options - log the filenames / time / date of copy, or the server takes a copy of the actual files being copied - in case you need to investigate further
0
 

Author Comment

by:cybersak
ID: 35189250
Tkz dudes, I'll try it & get u back.
Tkz for ur response
.
0
 
LVL 9

Expert Comment

by:morganmce
ID: 35193520
Verdasys's Digital Guardian also provides what you're looking for (and a whole lot more)

http://www.verdasys.com/data_loss_prevention.php

It's pretty comprehensive at logging what's happening your data.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 35195524
You don't mention if the domain is Server 2003 or 2008, but you can setup auditing of file access in Server 2008 natively  http://www.techotopia.com/index.php/Auditing_Windows_Server_2008_File_and_Folder_Access

Do you want to allow everyone to copy to removeable media, prevent everyone, or somewhere in between?  This can be accomplished with Group Policies  http://www.petri.co.il/disable_usb_disks_with_gpo.htm
0
 

Author Comment

by:cybersak
ID: 35204056
Tkz, CrisHanna_MVP.
I agree with ur solution.
I'm using Server 2008 and not r2.
If auditing, all the events will be logged,
What i need is only copying file to USB should be logged. B'cos, some of clients to my org. were small/entry level business peoples they don't have sys. admins. So, i've to make this task in easy way to access.
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35251123
Nasty solution - disable USB access and grant access to only one person.
0
 

Author Closing Comment

by:cybersak
ID: 35453406
I was forced to buy a 3rd party to have solutions.
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 35696380
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Forrester Webinar: xMatters Delivers 261% ROI

Guest speaker Dean Davison, Forrester Principal Consultant, explains how a Fortune 500 communication company using xMatters found these results: Achieved a 261% ROI, Experienced $753,280 in net present value benefits over 3 years and Reduced MTTR by 91% for tier 1 incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

More and more people are using the enhanced small form-factor pluggable (SFP+) tranceivers, and speed is of utmost importance. Testing of speeds are critical to ensure that the devices will meet the speed requirements. There are some testing challen…
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question