Owner of a file

[NoSf3RaTu]

Hello,

Is it possible to tell who copied a file into a shared folder? Let's say we
have a network folder on a machine and someone places a game in there. Can
you tell by any means who actually placed the file?

Thanks,

 

[Jeff Cochran]

Is it possible to tell who copied a file into a shared folder? Let's say we
have a network folder on a machine and someone places a game in there. Can
you tell by any means who actually placed the file?

If you've enabled auditing for this event prior to it happening, there
will be an event in your security log.

Jeff

 

[NoSf3RaTu]

Thanks,

By auditing event what do you mean? Can I audit all writes to the disk?

Thanks,

 

[Guest]

That would be a HUGE logfile! Don't do it! If it needed to be installed you can audit priveliged use and know that way.

 

[Jeff Cochran]

By auditing event what do you mean? Can I audit all writes to the disk?

Start -> Help -> "Auditing"

Jeff

 

[NoSf3RaTu]

Thanks

Start -> Help -> "Auditing"

Jeff

 

[Herb Martin]

I don't know why no one mention that you could just look
at the owner of the file in Explorer (or one of the Reskit-Support
tools)....

Right-click\Properties\Security\Advance\Owner: will show who
created the file UNLESS it was subsequently taken by another,
i.e., an admin or someone with full control.