|
it
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
Auditing QuestionI have a user that we're suspecting may be coping data. Is there a way of
auditing a user or computer based on coping data? Thanks, You can audit any file or folder after you have enabled auditing of object
access first. Having said that trying to audit a user copying files is almost certainly futile as a copy operation is a read and then write and the write could be to anywhere the user has write access including removable media that can not be audited. Auditing of folders and files is not a user friendly operation either and auditing read access does not prove much itself since the user could be legitimately accessing the folder. See the link below for how to audit a folder if still interested. Your computer user policy should have strict guidelines on copying sensitive data with spelled out consequences which may help deter such activity. --- Steve http://support.microsoft.com/default.aspx?scid=kb;en-us;300549 Show quoteHide quote "Peretz Stern" <peretzst***@optonline.net> wrote in message news:%23Ruf$S0zFHA.736@tk2msftngp13.phx.gbl... >I have a user that we're suspecting may be coping data. Is there a way of >auditing a user or computer based on coping data? > > > > > > Thanks, > > Auditing? See Windows, Help and Support.
Peretz Stern wrote: Show quoteHide quote > I have a user that we're suspecting may be coping data. Is there a way of > auditing a user or computer based on coping data? > > > > > > Thanks, > > Although I'm not the OP, I searched
Help and Support as you suggested out of curiosity. Got one hit on the keyword "auditing" and that pointed to the glossary. Checked the glossary and "auditing" wasn't in it. Tilt! Show quoteHide quote "Bob I" <bire***@yahoo.com> wrote in message news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl... > Auditing? See Windows, Help and Support. > > Peretz Stern wrote: > >> I have a user that we're suspecting may be coping data. Is there a >> way of auditing a user or computer based on coping data? >> >> >> >> >> >> Thanks, >> >> > rather odd. Are you using XP? Help provides 15 hits locally and another
30 in the Knowledge Base Article. And the local ones contain "How to" Uncle Joe wrote: Show quoteHide quote > Although I'm not the OP, I searched > Help and Support as you suggested > out of curiosity. Got one hit on the > keyword "auditing" and that pointed > to the glossary. Checked the glossary > and "auditing" wasn't in it. Tilt! > > "Bob I" <bire***@yahoo.com> wrote in message > news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl... > >>Auditing? See Windows, Help and Support. >> >>Peretz Stern wrote: >> >> >>>I have a user that we're suspecting may be coping data. Is there a >>>way of auditing a user or computer based on coping data? >>> >>> >>> >>> >>> >>>Thanks, >>> >>> >> > > Yes, I'm using XP Home SP2. Didn't access MS Knowledge Base online,
just the local Help and Support search facility on my system. Got just one hit. Was surprised by that. Show quoteHide quote "Bob I" <bire***@yahoo.com> wrote in message news:e2QI6yB0FHA.2652@TK2MSFTNGP14.phx.gbl... > rather odd. Are you using XP? Help provides 15 hits locally and another 30 in the > Knowledge Base Article. And the local ones contain "How to" > > Uncle Joe wrote: > >> Although I'm not the OP, I searched >> Help and Support as you suggested >> out of curiosity. Got one hit on the >> keyword "auditing" and that pointed >> to the glossary. Checked the glossary >> and "auditing" wasn't in it. Tilt! >> >> "Bob I" <bire***@yahoo.com> wrote in message >> news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl... >> >>>Auditing? See Windows, Help and Support. >>> >>>Peretz Stern wrote: >>> >>> >>>>I have a user that we're suspecting may be coping data. Is there a way of auditing a >>>>user or computer based on coping data? >>>> >>>> >>>> >>>> >>>> >>>>Thanks, >>>> >>>> >>> >> >> > This facility is unavailable on Windows XP Home Edition
-- Show quoteHide quote-------------------------------------------------------------------------------------------------- http://webdiary.smh.com.au/archives/_comment/001075.html ================================================= "Uncle Joe" <Uncle J***@anonymous.net> wrote in message news:O9sexVh0FHA.664@tk2msftngp13.phx.gbl... > Yes, I'm using XP Home SP2. Didn't access MS Knowledge Base online, > just the local Help and Support search facility on my system. Got just one hit. > Was surprised by that. > > "Bob I" <bire***@yahoo.com> wrote in message news:e2QI6yB0FHA.2652@TK2MSFTNGP14.phx.gbl... >> rather odd. Are you using XP? Help provides 15 hits locally and another 30 in the >> Knowledge Base Article. And the local ones contain "How to" >> >> Uncle Joe wrote: >> >>> Although I'm not the OP, I searched >>> Help and Support as you suggested >>> out of curiosity. Got one hit on the >>> keyword "auditing" and that pointed >>> to the glossary. Checked the glossary >>> and "auditing" wasn't in it. Tilt! >>> >>> "Bob I" <bire***@yahoo.com> wrote in message >>> news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl... >>> >>>>Auditing? See Windows, Help and Support. >>>> >>>>Peretz Stern wrote: >>>> >>>> >>>>>I have a user that we're suspecting may be coping data. Is there a way of auditing a >>>>>user or computer based on coping data? >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>Thanks, >>>>> >>>>> >>>> >>> >>> >> > >
Other interesting topics
Backup Solution
Volume Shadow Copy - how does it work? NET SEND Joining multiple AD domains and Which Remote to use? Quota tab missing in windows 2003 server Creating a network boot disk NTBackup - Command Line - Stops (No GUI is shown) Monitoring Network Traffic Monitor folder file changes Terminal Services Forced Logoff? |
|||||||||||||||||||||||