Finding The IP Address Of The Computer Which Created A File

[Lagomorph]

Hello, I was wondering if it was possible to find the internal IP address of the computer which created a file. I would be finding this on xp pro.
Thanks In Advance

 

[hang-the-9]

That information is not stored anywhere in the file, you may be able to get the user name of the person that created it by checking the properties of the file. I'm not a PC forensics expert, but have looked at many file properties, none of them state which PC they were created on.

You can also check the Security tab and see if there is a PC or username in there that will lead you somewhere.

 

[Ijack]

In general there is no way to tell who created a file or on which computer it was created. If this sort of information is important you need to turn on user account auditing and audit the creation of objects.

Some programs, such as Word, may contain the name of the creator but not the computer it was created on. The IP address doesn't come into it - a computer doesn't need an IP address, or any form of networking, to create a file.

 

[Lagomorph]

This file is stored on a network server, however. I was wondering if windows has any way of marking the file as to which computer it was saved from on the network.

 

[hang-the-9]

This file is stored on a network server, however. I was wondering if windows has any way of marking the file as to which computer it was saved from on the network.

No, it just saves the general info in the file, user that created it (if setup in Office), file type, date of creation, etc..

If you have auditing turned on in the server, you may be able to see which user placed the file there, and possibly which PC it came from. Just the file itself though won't tell you what computer it came from.

 

[Lagomorph]

I just confirmed that auditing is turned on for the server. How would I go about finding the user and computer from there?

 

[hang-the-9]

Check with the system admins, they'd need to go over the logs. This should help: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_25007720.html

 

[Lagomorph]

Best answer selected by Lagomorph.