Question

  • Thread starter Thread starter Liu
  • Start date Start date
L

Liu

Hi I'm wondering if anyone could tell me how to check who
last modified a file in windows 2000.

I tried to look under properties->securities, it only
gives the owner of the file. Maybe I need to use a command
prompt?

Thanks.
 
Hi Liu,

You can only get this information if you have auditing enabled - go to the
file/folder, security\advanced\auditing.

kind regards
Ian
 
You need to go to the security event log to view who last accessed the file.
The ownership of the file does not change by a different - but allowed -
user modifying it.
 
I went to Computer management, and checked the security
log, but it doesn't show any info about file change or
anything.

I must be dumb, am I looking into the wrong place again?
 
I'm not sure what steps you've followed or not, but there are a number of
steps and its real easy to miss one. I recommend you take a look at the KB
article http://support.microsoft.com/?kbid=300549 and ensure you're
following it exactly. This should work without a doubt.

--

-Mike Danseglio
Microsoft Corporation

* This posting is provided "AS IS" with no warranties, and confers no
rights.
* Please note I cannot respond to email questions. Please use these
newsgroups.
 
Back
Top