Our setup here is Windows 7 64-bit PCs connected to several company servers. Had an incident recently where some files were changed on our primary server under suspicious circumstances. I'm wondering if a server tracks which user accesses files and at what time/date? WinSCP shows me rwx rights and a five-digit "owner" code but that's all.