Tracking copy / deletion

Posted on 2012-09-12
Last Modified: 2012-09-13

We've got to track an impending departure from a company - I need to monitor all files that are copied / deleted or anything on the server that this user does anything with.
The server is SBS 2008, their workstation is Win 7.
I'm ok with using 3rd party software... just need to provide management a full report each week.

Question by:optimus_nz
    LVL 74

    Accepted Solution

    NTFS Auditing which is built into Windows does a pretty good job of this, but I find it to be a bit cumbersome to extract the important information you may need.

    Luckily there are some good 3rd-party tools that work with Auditing to make it much easier to use.  One that I've tried is FileAudit.  The trial version allows you to audit 2 machines.  If you need to do more you have to buy the license.

    Another that I've seen, but haven't tried is File-Sight.  It looks a bit more comprehensive, and has a fully functional 30-day trial.


    Author Closing Comment

    Thanks Jeff - perfect answer.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    Suggested Solutions

    You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now