Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I do not want to restrict deletion, as it may be required in some genuine cases. However, I need to track accidental or intentional deletion or renaming of files of a particular extension, has been done by which user and at what time.

Also I need to track the user names and date times when particular folders have been modified. Windows shows the last modified time, but I need to track the history of modifications.

Operating System is Windows XP and File System is NTFS.

share|improve this question
    
I went through this link: sogeeky.blogspot.in/2006/07/…. It gives partial solution, like specific folders can be tracked. I tried to implement it. Even for file rename operation, it generates a Delete event log, which is fine. However, it will be helpful to know what is the renamed file name. –  AllSolutions Oct 24 '12 at 20:39
    
Process Monitor, from sysinternals.com, can probably help. I know you can set up a series of filters for it, but it does have an overhead. –  user3463 Oct 24 '12 at 20:43
    
Process Monitor is probably a real time monitor. I need to track file and folder deletion and renaming operations for last 60 days. Windows Local Account Policy looks to be fine, but it does not capture the renamed file's new name. –  AllSolutions Oct 24 '12 at 21:07
    
Also I want the logging to be done silently, without the user being aware of it. –  AllSolutions Oct 24 '12 at 22:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.