Solved

Audit if a user copies a file from Windows 2003 Server

Posted on 2013-05-31
4
672 Views
Last Modified: 2014-07-31
Dear Expert,

My company is using Windows 2003 Server (Standard Edition) as the file server, any method or third party software that can log or audit who has copied server files to users local HDD or USB device ?


Thanks so much !


Best Regards,
Patrick
0
Comment
Question by:Patrick3388
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 54

Accepted Solution

by:
McKnife earned 500 total points
ID: 39210997
Hi.

At the server, you can audit when the file is being read, that does not tell you if it's being copied or just opened. So you would need to do that at the client. But I am afraid that unless your clients are on windows 8, there is no way. Win8 knows something new:  http://technet.microsoft.com/en-us/library/hh849638.aspx
Quote: "Audit removable storage devices - Many organizations are concerned about sensitive data being copied onto removable storage devices that are not controlled by their IT departments. Windows 7 and Windows Server 2008 R2 do not support auditing removable storage devices. As a result, enterprises lose the visibility of who accessed sensitive data after it has been copied to a removable storage device. "
0
 
LVL 42

Expert Comment

by:sedgwick
ID: 39213970
what OS runs on the clients?
0
 

Author Comment

by:Patrick3388
ID: 39215076
Clients are usually using Windows 7 and XP
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question