Tom's Hardware > Forum > Windows XP > Windows XP General Discussion > Auditing File Copy

Auditing File Copy

Forum Windows XP : Windows XP General Discussion - Auditing File Copy

Tom's Hardware: Over 1.4 million members in 6 different countries available to answer all your high-tech questions. Sign up now! Its free!

Related content

Is there a way to report what files have been changed in a..

See all topics related to "auditing file copy"

Ask the community Add a reply

Bottom Search this thread

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I would like to Audit file copy in the System area of the Event Viewer in
WindowsXP. I have turned on auditing and set up the folders I want to audit.
However there is no separate copy audit type and I see thousands of Reads
being audited. Is there any way to audit just file copies? If not natively
in XP then does anyone know of a 3rd party tool to achieve this.

Any help would be great.

Cheers

Colin

Add a reply

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

HOW TO: Audit User Access of Files, Folders, and Printers in Windows XP
http://support.microsoft.com/defau [...] duct=winxp

R-Guard Data Security Software
http://www.data-security-software.com/

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/se [...] hoose.mspx

-------------------------------------------------------------------------------------------

"Colin J Paterson" wrote:

| I would like to Audit file copy in the System area of the Event Viewer in
| WindowsXP. I have turned on auditing and set up the folders I want to audit.
| However there is no separate copy audit type and I see thousands of Reads
| being audited. Is there any way to audit just file copies? If not natively
| in XP then does anyone know of a 3rd party tool to achieve this.
|
| Any help would be great.
|
| Cheers
|
| Colin

Reply to Anonymous

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

how would you know if the file is being copied or just being read for any
other reason? for instance, the low level file access is exactly the same
when you open a file and display it in notepad as when you copy it byte by
byte so some other file. so how could any audit software know for sure what
the disposition of bytes being read from a file was?

"Colin J Paterson" <nospam@thanks.com> wrote in message
news:uXMfAxkKFHA.3896@TK2MSFTNGP10.phx.gbl...
> I would like to Audit file copy in the System area of the Event Viewer in
> WindowsXP. I have turned on auditing and set up the folders I want to
audit.
> However there is no separate copy audit type and I see thousands of Reads
> being audited. Is there any way to audit just file copies? If not natively
> in XP then does anyone know of a 3rd party tool to achieve this.
>
> Any help would be great.
>
> Cheers
>
> Colin
>
>

Reply to Dave

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Neither of these do what I asked.

"Carey Frisch [MVP]" <cnfrisch@nospamgmail.com> wrote in message
news:uFnLFAlKFHA.2764@tk2msftngp13.phx.gbl...
> HOW TO: Audit User Access of Files, Folders, and Printers in Windows XP
> http://support.microsoft.com/defau [...] duct=winxp
>
> R-Guard Data Security Software
> http://www.data-security-software.com/
>
> --
> Carey Frisch
> Microsoft MVP
> Windows XP - Shell/User
> Microsoft Newsgroups
>
> Get Windows XP Service Pack 2 with Advanced Security Technologies:
> http://www.microsoft.com/athome/se [...] hoose.mspx
>
> -------------------------------------------------------------------------------------------
>
> "Colin J Paterson" wrote:
>
> | I would like to Audit file copy in the System area of the Event Viewer
> in
> | WindowsXP. I have turned on auditing and set up the folders I want to
> audit.
> | However there is no separate copy audit type and I see thousands of
> Reads
> | being audited. Is there any way to audit just file copies? If not
> natively
> | in XP then does anyone know of a 3rd party tool to achieve this.
> |
> | Any help would be great.
> |
> | Cheers
> |
> | Colin
>

Reply to Anonymous

Ask the community Add a reply

Tom's Hardware > Forum > Windows XP > Windows XP General Discussion > Auditing File Copy

Go to:

Help |
Forum rules

There are 1186 identified and unidentified users. To see the list of identified users, Click here.

Page generated in 0.349 seconds

Please mind

You are about to answer a thread that has been inactive for more than 6 months.
If you still wish to proceed, please ensure that your posting is original and does not duplicate or overlap any prior responses to this thread.

Add a reply Cancel

Focus On

Auditing File Copy

Forum Windows XP : Windows XP General Discussion - Auditing File Copy

Please mind