0

I do not want to restrict deletion, as it may be required in some genuine cases. However, I need to track accidental or intentional deletion or renaming of files of a particular extension, has been done by which user and at what time.

Also I need to track the user names and date times when particular folders have been modified. Windows shows the last modified time, but I need to track the history of modifications.

Operating System is Windows XP and File System is NTFS.

Improve this question
4
  • I went through this link: sogeeky.blogspot.in/2006/07/…. It gives partial solution, like specific folders can be tracked. I tried to implement it. Even for file rename operation, it generates a Delete event log, which is fine. However, it will be helpful to know what is the renamed file name.
    – AllSolutions
    Commented Oct 24, 2012 at 20:39
  • Process Monitor, from sysinternals.com, can probably help. I know you can set up a series of filters for it, but it does have an overhead.
    – user3463
    Commented Oct 24, 2012 at 20:43
  • Process Monitor is probably a real time monitor. I need to track file and folder deletion and renaming operations for last 60 days. Windows Local Account Policy looks to be fine, but it does not capture the renamed file's new name.
    – AllSolutions
    Commented Oct 24, 2012 at 21:07
  • Also I want the logging to be done silently, without the user being aware of it.
    – AllSolutions
    Commented Oct 24, 2012 at 22:15

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .