Find out who last modified shared folder

September 14, 2012 at 07:39:34
Specs: Windows storage server 2003, Xeon/4GB
Could any experienced network admins recommend a good software for finding out who last modified shared folders? Recently I've been having troubles with people accidentally renaming folders and would like to track down the culprit(s). I have enabled auditing but it's a real annoyance searching through the event viewer that can generate several thousand logs in just a few minutes.
Thanks in advance,
~winipcfg

ASCII question, get an ANSI


See More: Find out who last modified shared folder

Report •

#1
September 14, 2012 at 13:42:53
Did you check the ownership of the folder?

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#2
September 17, 2012 at 08:20:31
Hi Wanderer,
If my understanding is correct then ownership of the folder only shows who last opened it, not who changed it last. I'm thinking that I may need a 3rd party that does what I ask.

ASCII question, get an ANSI


Report •

#3
September 17, 2012 at 10:53:25
ownership is not based on who last opened it but who last saved it [renaned it].

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

Related Solutions

#4
September 18, 2012 at 01:33:16
"ownership is not based on who last opened it but who last saved it [renaned it]."

Are you sure of that? I don't believe that renaming a file or folder changes the owner. Ownership is a specific security attribute that is not affected by normal access to a file system object.


Report •

#5
September 18, 2012 at 10:44:07
You are correct ijack. This was not the case in the past. Presently I show only administrators as owner even when I create a folder in my home folder.

I still have printouts in files dealing with users coping a public folder, modifing it and they putting it back on the network with the same name. Everyone lost their rights to access the folder. I was able to prove who did it with a print screen of the ownership.

Seems like with each version of MS we lose features.

Answers are only as good as the information you provide.
How to properly post a question:
Sorry no tech support via PM's


Report •

#6
September 19, 2012 at 09:41:58
Thanks for replying everyone. The search continues.
~winipcfg

ASCII question, get an ANSI


Report •

Ask Question