Security Basics mailing list archives

Auditing moved/copied files on a Win2003 network


From: "Scott Race" <srace () jdaarch com>
Date: Wed, 27 Feb 2008 18:43:22 -0800

We have a situation where an employee is leaving and some files got
moved on our server.  Nothing was deleted, but we're trying to figure
out if he copied them to a CD, USB flash drive, etc.  I could not find
where Windows 2003 Server will let you audit file copies and moves, just
deletes and accesses.  Is there something I'm missing that's built in,
or what 3rd party applications are available (smaller budget, office of
15 users)?


Thanks in advance.

 

Scott Race

Technology Manager

JD+A NETWORK SERVICES


Current thread: