Is it possible to determine if files have been copied to a USB drive?
We have a request to determine if a former associate copied files to an external hard drive. It's a standard Windows Server 2012 domain environment with most defaults in place. I am sure that logging has not been enabled, but an curious that if it is turned on will there be performance issues? I have found a registry location that shows (3) separate drives, but that's it. There's no date / time or file transfer information. Any advice will be most appreciated. Thx