Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have some developer machines that part-time developers come and work on. I want to monitor and report if they copy any files to external media or attach files to their email accounts (and so on).

It is a matter of source protection, but I cannot disable internet access or external media, so is there any way to log these kind of file actions in Windows XP?

share|improve this question
Server Fault?.. – Hello71 Jun 23 '10 at 22:07

You might want to consider physically securing their workstations. Configure their workstations without WiFi or Bluetooth or user-accessible USB ports, put the computers in enclosures which allow airflow but which block access to the ports on the back (such as the Ethernet port and USB ports), block or limit their Internet access, and don't allow them to connect personal devices to the network. Of course, if someone is determined enough to steal code, this won't stop them, but it will make things significantly more inconvenient.

Unless you're producing software for banking or weapons systems, you might just be overly paranoid. Run background checks on all your employees, or at least require them to provide enough information so that you can run the background checks at any time. Also make sure you have them all sign nondisclosure agreements and have well-defined entrance and termination procedures, such as signing a paper saying that they have returned all company property and have returned or destroyed all copies of your code which have come into their possession. This might not prevent them from stealing code, but it gives you some legal recourse if your code ends up leaking out and the leak can be traced back to a specific employee.

At some level you need to be able to trust the employees you hire, or else you're just wasting your money.

share|improve this answer

I think "process monitor" by sysinternals may be able to help in that regard.

share|improve this answer
Not really, it's not really something you can hide in systray, it's easy to deactivate, and results will be hard to read anyway. Not really adapted to the task. – Gnoupi Feb 1 '10 at 16:56

You could use captureBAT and exclude all other activity from being reported in the log files. This allows you to monitor file system changes, among other things.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.