• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 366
  • Last Modified:

Forensic software

I need to find trial or free software ot find out who made changes to server files that contains my licenses
0
YRMC_Infrastructure
Asked:
YRMC_Infrastructure
1 Solution
 
davorinCommented:
I'm affraid that post-festum you will not be able to do that. You would need to already monitor your servers using auditing.
Primer of auditing:
http://support.microsoft.com/kb/325898
0
 
xmlmagicianCommented:
+1 to davorin

one way to narrow it down is if you go to event viewer and security and see who has logged in. that might give you a hint or point you to a direction.
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
Agreed with the above.

I'd also suggest you start securing the files so that only authorized people have access to files... if they don't need access, put them in a shared folder they don't have access to!
0
 
jjjosefCommented:
I think you need a complete monitoring software which will monitor all the activities happening in you SQL Server ,exchange server and active directory also and give a report for the same .
In case you can try this out
Windows event log management

Keep Updating us !
0
 
davorinCommented:
If you didn't enabled auditing on your server you will have no data you need in logs - so even Event Log Manager will not help you.
Event Log Manager is just a tool that shows what is written in event logs in different way...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now