Log of files accessed

[tomamitai]

Does Win 7 Home Premium maintain a log of shared files being accessed and which machine they were accessed from? I am getting tired of telling my users about new files being available, only to have them tell me they already know about them. If not, is there some third party app that can monitor the shared folders and create such a log?

 

[rotaz]

Not sure if this is available on home premium but in Win7 Enterprise you can enable Auditing which records info in the event logs.

Right click the folder (or file) and go properties
go to security tab and click advanced
go to auditing tab and click Edit
Click Add.
Select object type and add objects (be it usernames, groups, everyone or specific computers). Click OK
Tick the boxes for events you want to record. Click OK
Tick the box to include/replace inheritable entries.
Click OK.OK.OK.

Check the event log on a periodic basis.

 

[tomamitai]

Not sure if this is available on home premium but in Win7 Enterprise you can enable Auditing which records info in the event logs.

Right click the folder (or file) and go properties
go to security tab and click advanced
go to auditing tab and click Edit
Click Add.
Select object type and add objects (be it usernames, groups, everyone or specific computers). Click OK
Tick the boxes for events you want to record. Click OK
Tick the box to include/replace inheritable entries.
Click OK.OK.OK.

Check the event log on a periodic basis.

Thanks, I was able to use your instructions on my version of Windows. One thing I can't figure out, where in the event log should I look?

 

[tomamitai]

I just found this app:
Monitoring access to your shared files on network « C# Tips

It's a bit clunky, but it's free, and allows realtime monitoring of share accesses.

 

[rotaz]

should be in the "Windows Logs\Security" folder.

I'd suggest adding colum "Task Category". The task your looking for is Detailed File Share.