track who accessed/deleted a file/folder.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Does anyone know how to track who last accessed a file or
folder? In Novell, once someone opened the file/folder,
there is a time and user ID stamped. If someone also
deletes a file, you can find out who deleted a file. I
have setup audit in win2k, but it is no use.
Thanks.
Min
 
You can enable auditing of object access and then audit specific files/folders for
particular access levels by users/groups, but it does generate a huge amount of
entries so you may want to use it sparingly. It may help to filter for certain for
events such as 560 and 562. --- Steve
 
Hi,
Unfortunately I have did all that, and also asked someone
to test it as well. It just doesn't work. Have anyone
of you tested this yet?
Thanks,
Min
 
Back
Top