Solved

Audit if a user copies a file from Windows 2003 Server

Posted on 2013-05-31
4
662 Views
Last Modified: 2014-07-31
Dear Expert,

My company is using Windows 2003 Server (Standard Edition) as the file server, any method or third party software that can log or audit who has copied server files to users local HDD or USB device ?


Thanks so much !


Best Regards,
Patrick
0
Comment
Question by:Patrick3388
4 Comments
 
LVL 53

Accepted Solution

by:
McKnife earned 500 total points
ID: 39210997
Hi.

At the server, you can audit when the file is being read, that does not tell you if it's being copied or just opened. So you would need to do that at the client. But I am afraid that unless your clients are on windows 8, there is no way. Win8 knows something new:  http://technet.microsoft.com/en-us/library/hh849638.aspx
Quote: "Audit removable storage devices - Many organizations are concerned about sensitive data being copied onto removable storage devices that are not controlled by their IT departments. Windows 7 and Windows Server 2008 R2 do not support auditing removable storage devices. As a result, enterprises lose the visibility of who accessed sensitive data after it has been copied to a removable storage device. "
0
 
LVL 42

Expert Comment

by:sedgwick
ID: 39213970
what OS runs on the clients?
0
 

Author Comment

by:Patrick3388
ID: 39215076
Clients are usually using Windows 7 and XP
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now