Solved

Access my computer

Posted on 2015-01-11
11
62 Views
Last Modified: 2015-01-29
dear
i would like to know who was access my network machines using hidden share , as i have discovered that some machine in my organization someone copied documnets ith illegal way ,how i can know who copied these data
thanks
0
Comment
Question by:Alkannetworks
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 5
11 Comments
 
LVL 70

Expert Comment

by:Qlemo
ID: 40543178
If it was a admin share (C$, D$ etc.), then only an admin can use them.
If it is a self-made hidden share (share$ or the like), you determine the access privileges. See in your Security Event Log for logins from other machines.
0
 

Author Comment

by:Alkannetworks
ID: 40543188
in event viewer it will appears who was connected using hidden share on my drive c$ or d$ ?
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 40543193
All access to your PC is logged. I don't know if you see additional info about specific shares, but as said, only admins can use them, so the amount of people being able to copy data should be nearly zero.
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 

Author Comment

by:Alkannetworks
ID: 40543194
ok but when i have tested that on my server that i usually access using hidden share i didnt found it thing undefr security tab in event veiwer ?
0
 

Author Comment

by:Alkannetworks
ID: 40543195
I mean that i didnt found anything that told me that i have access this server using hidden share
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 40543201
Windows logs if you access the machine. It does not log which share, file or folder, though.

Again, and again: If you see someone using your account from a different machine, you've found the culprit.
if everyone has admin access, it is your fault, and nothing will reveal who has misused that.
0
 

Author Comment

by:Alkannetworks
ID: 40543205
ok , but no way even if i will using a 3rd P Application to see who was accessed my folders not just who access my machine
thanks
0
 
LVL 70

Expert Comment

by:Qlemo
ID: 40543212
"Was" - no. You can't get logs from the past, not having used file auditing or 3rd-party apps. The action of copying a file leaves no trace, until you say to log that (= auditing).
0
 

Author Comment

by:Alkannetworks
ID: 40543218
thanks ,i wish to know that
but how i can activate the auditing as u mentioned
0
 
LVL 70

Accepted Solution

by:
Qlemo earned 500 total points
ID: 40543229
0
 

Author Closing Comment

by:Alkannetworks
ID: 40577020
Many thanks
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Article by: Lee
Windows 7 Ultimate and Enterprise (and 2008 R2) introduced a new feature you may not be aware of - Boot from VHD.   Boot from VHD (or what Microsoft refers to asNative Boot allows you to install Windows to a VHD (Virtual Hard Disk) file that is t…
First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question