nV News Forums

 
 

nV News Forums (http://www.nvnews.net/vbulletin/index.php)
-   Microsoft Windows XP And Vista (http://www.nvnews.net/vbulletin/forumdisplay.php?f=11)
-   -   Is there a way to monitor whether a user copied a certain file? (http://www.nvnews.net/vbulletin/showthread.php?t=134864)

hokeyplyr48 06-23-09 11:49 AM

Is there a way to monitor whether a user copied a certain file?
 
I have alot of important financial files that need to be kept track of and another user is going to be working on my network. They will be reading and writing to these files but I want to know if there is a way to monitor whether the user copies the files so that I can be made aware. Is there anything that can do this?

I've done research and there are programs that will notify you if a user accesses/modifies/deletes the files but theres nothing that explicitly states copies because the users are going to be working on the files so those options really aren't going to help.

any ideas/thoughts?

saturnotaku 06-25-09 05:20 AM

Re: Is there a way to monitor whether a user copied a certain file?
 
Quote:

Originally Posted by hokeyplyr48 (Post 2034831)
any ideas/thoughts?

You could install a keylogger on their machines so you can monitor ctrl-c, ctrl-v commands. If you can, you might want to install a remote desktop application so you or someone else can watch them as they work. Other than that, I'm not personally aware of anything that can monitor actual file copies.

lduguay 06-25-09 06:33 AM

Re: Is there a way to monitor whether a user copied a certain file?
 
Quote:

Originally Posted by hokeyplyr48 (Post 2034831)
I have alot of important financial files that need to be kept track of and another user is going to be working on my network. They will be reading and writing to these files but I want to know if there is a way to monitor whether the user copies the files so that I can be made aware. Is there anything that can do this?

I've done research and there are programs that will notify you if a user accesses/modifies/deletes the files but theres nothing that explicitly states copies because the users are going to be working on the files so those options really aren't going to help.

any ideas/thoughts?

First, copying a file (i.e.) will update the file access date time. Second, you should setup the appropriate ACLs (Access control list) on the files/directories and activate the windows audit logs (Local policies), instead of passively monitoring who dun what.


All times are GMT -5. The time now is 11:59 AM.

Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright 1998 - 2014, nV News.