Solved

Access my computer

Posted on 2015-01-11
11
56 Views
Last Modified: 2015-01-29
dear
i would like to know who was access my network machines using hidden share , as i have discovered that some machine in my organization someone copied documnets ith illegal way ,how i can know who copied these data
thanks
0
Comment
Question by:Alkannetworks
  • 6
  • 5
11 Comments
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
If it was a admin share (C$, D$ etc.), then only an admin can use them.
If it is a self-made hidden share (share$ or the like), you determine the access privileges. See in your Security Event Log for logins from other machines.
0
 

Author Comment

by:Alkannetworks
Comment Utility
in event viewer it will appears who was connected using hidden share on my drive c$ or d$ ?
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
All access to your PC is logged. I don't know if you see additional info about specific shares, but as said, only admins can use them, so the amount of people being able to copy data should be nearly zero.
0
 

Author Comment

by:Alkannetworks
Comment Utility
ok but when i have tested that on my server that i usually access using hidden share i didnt found it thing undefr security tab in event veiwer ?
0
 

Author Comment

by:Alkannetworks
Comment Utility
I mean that i didnt found anything that told me that i have access this server using hidden share
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
Windows logs if you access the machine. It does not log which share, file or folder, though.

Again, and again: If you see someone using your account from a different machine, you've found the culprit.
if everyone has admin access, it is your fault, and nothing will reveal who has misused that.
0
 

Author Comment

by:Alkannetworks
Comment Utility
ok , but no way even if i will using a 3rd P Application to see who was accessed my folders not just who access my machine
thanks
0
 
LVL 68

Expert Comment

by:Qlemo
Comment Utility
"Was" - no. You can't get logs from the past, not having used file auditing or 3rd-party apps. The action of copying a file leaves no trace, until you say to log that (= auditing).
0
 

Author Comment

by:Alkannetworks
Comment Utility
thanks ,i wish to know that
but how i can activate the auditing as u mentioned
0
 
LVL 68

Accepted Solution

by:
Qlemo earned 500 total points
Comment Utility
0
 

Author Closing Comment

by:Alkannetworks
Comment Utility
Many thanks
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Suggested Solutions

First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now