troubleshooting Question

How do I find the date and time a File/Folder/Software was copied or installed on a Windows 2008 server?

Avatar of baleman2
baleman2 asked on
Windows Server 2008Miscellaneous
12 Comments1 Solution3011 ViewsLast Modified:
Unless I'm missing something very obvious, I'm dabbling a bit in computer forensics on one of our company servers.  I'm trying to determine the date that Folders/Files were copied from a DVD to a shared folder on the server's hard drive.

A Right-Click on the Folder with a look at "Properties" provides me with Date Created.  However, the date shown here just doesn't jibe with the memory of those end users who initially used Copy/Paste to place the folder on the hard drive from the DVD.

Is there any way that the Server would have recorded this information?
ASKER CERTIFIED SOLUTION
Enabbar Ocap
Embalsamador

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 12 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 12 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros