Solved

How to make log file for files being copied to USB stick

Posted on 2011-03-21
17
606 Views
Last Modified: 2013-11-08
I want to make log file for things being copied from workstation to USB Storage device.
Whatever things being copied to usb device should be logged in a file.

i.e., If user copied a file named abc.txt from local dirve,( path: "c:\abc.txt"), this file name along with path must be recorded.
Is it possible? If yes, how to acheive it.

Note: Workstations(Win 7, Vista & XP) are connected in domain architecture, working with Win server 2008 Std. Edition R1.
0
Comment
Question by:cybersak
  • 4
  • 3
  • 2
  • +5
17 Comments
 

Expert Comment

by:ibbz-au
ID: 35186667
you are talking about a logging software -- this will have to be some third party application or something that needs to be coded.
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35187205
Use something like...
xcopy *.pdf c:\temp\*.* /s /e > log.log

You'll get a file like
C:URN_NBN_SI_DOC-W0N0RXYN.pdf
C:URN_NBN_SI_DOC-WFQVGUDN.pdf
C:3\R1101-001.pdf
C:3\R1101-002.pdf
4File(s) copied
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35187210
Oh, you need something behind to audit copying...
0
3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

 

Author Comment

by:cybersak
ID: 35188122
S, i need some auditing tool to monitor my usb port for data transfer.
0
 
LVL 25

Accepted Solution

by:
RobMobility earned 250 total points
ID: 35188563
Hi,

I believe Lumension produce a product which will audit and control what you want:

http://www.lumension.com/device-control-software/usb-security-protection.aspx

Regards,


RobMobility.
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 35188581
Hi,

These products may also be of interest:

http://www.advansysusa.com/products_usb_standard.html

Is it just the one workstation or are you looking for an Enterprise solution?

Regards,


RobMobility.
0
 
LVL 4

Expert Comment

by:FireW0lf
ID: 35188739
If your corp can afford it go with RobMobilitys solution.

We use Lumension at our corp, and "shadow copying" (tracking files copied to/from removable storage) is just one of the things it does very well

Oh, and with shadowing you have 2 main options - log the filenames / time / date of copy, or the server takes a copy of the actual files being copied - in case you need to investigate further
0
 

Author Comment

by:cybersak
ID: 35189250
Tkz dudes, I'll try it & get u back.
Tkz for ur response
.
0
 
LVL 9

Expert Comment

by:morganmce
ID: 35193520
Verdasys's Digital Guardian also provides what you're looking for (and a whole lot more)

http://www.verdasys.com/data_loss_prevention.php

It's pretty comprehensive at logging what's happening your data.
0
 
LVL 35

Expert Comment

by:Cris Hanna
ID: 35195524
You don't mention if the domain is Server 2003 or 2008, but you can setup auditing of file access in Server 2008 natively  http://www.techotopia.com/index.php/Auditing_Windows_Server_2008_File_and_Folder_Access

Do you want to allow everyone to copy to removeable media, prevent everyone, or somewhere in between?  This can be accomplished with Group Policies  http://www.petri.co.il/disable_usb_disks_with_gpo.htm
0
 

Author Comment

by:cybersak
ID: 35204056
Tkz, CrisHanna_MVP.
I agree with ur solution.
I'm using Server 2008 and not r2.
If auditing, all the events will be logged,
What i need is only copying file to USB should be logged. B'cos, some of clients to my org. were small/entry level business peoples they don't have sys. admins. So, i've to make this task in easy way to access.
0
 
LVL 4

Expert Comment

by:Malajlo
ID: 35251123
Nasty solution - disable USB access and grant access to only one person.
0
 

Author Closing Comment

by:cybersak
ID: 35453406
I was forced to buy a 3rd party to have solutions.
0
 
LVL 69

Expert Comment

by:Qlemo
ID: 35696380
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Master Your Team's Linux and Cloud Stack!

The average business loses $13.5M per year to ineffective training (per 1,000 employees). Keep ahead of the competition and combine in-person quality with online cost and flexibility by training with Linux Academy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Valere unit 6 69
PC will not stay shut down 56 133
How to install USMT 11 105
fans of one ProLiant randomly(?) speeding up to 100%!? 15 98
More and more people are using the enhanced small form-factor pluggable (SFP+) tranceivers, and speed is of utmost importance. Testing of speeds are critical to ensure that the devices will meet the speed requirements. There are some testing challen…
Or at least that’s the word according to a new blog from Tech Target on AWS’s new Managed Services (MS) offering. According to the blog, AWS is launching their AWS MS program to expedite the adoption of cloud by Fortune 1000 and Global 2000 companie…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question