Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 68
  • Last Modified:

Access my computer

dear
i would like to know who was access my network machines using hidden share , as i have discovered that some machine in my organization someone copied documnets ith illegal way ,how i can know who copied these data
thanks
0
Alkannetworks
Asked:
Alkannetworks
  • 6
  • 5
1 Solution
 
QlemoC++ DeveloperCommented:
If it was a admin share (C$, D$ etc.), then only an admin can use them.
If it is a self-made hidden share (share$ or the like), you determine the access privileges. See in your Security Event Log for logins from other machines.
0
 
AlkannetworksAuthor Commented:
in event viewer it will appears who was connected using hidden share on my drive c$ or d$ ?
0
 
QlemoC++ DeveloperCommented:
All access to your PC is logged. I don't know if you see additional info about specific shares, but as said, only admins can use them, so the amount of people being able to copy data should be nearly zero.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
AlkannetworksAuthor Commented:
ok but when i have tested that on my server that i usually access using hidden share i didnt found it thing undefr security tab in event veiwer ?
0
 
AlkannetworksAuthor Commented:
I mean that i didnt found anything that told me that i have access this server using hidden share
0
 
QlemoC++ DeveloperCommented:
Windows logs if you access the machine. It does not log which share, file or folder, though.

Again, and again: If you see someone using your account from a different machine, you've found the culprit.
if everyone has admin access, it is your fault, and nothing will reveal who has misused that.
0
 
AlkannetworksAuthor Commented:
ok , but no way even if i will using a 3rd P Application to see who was accessed my folders not just who access my machine
thanks
0
 
QlemoC++ DeveloperCommented:
"Was" - no. You can't get logs from the past, not having used file auditing or 3rd-party apps. The action of copying a file leaves no trace, until you say to log that (= auditing).
0
 
AlkannetworksAuthor Commented:
thanks ,i wish to know that
but how i can activate the auditing as u mentioned
0
 
QlemoC++ DeveloperCommented:
0
 
AlkannetworksAuthor Commented:
Many thanks
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 6
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now