Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I do not want to restrict deletion, as it may be required in some genuine cases. However, I need to track accidental or intentional deletion or renaming of files of a particular extension, has been done by which user and at what time.

Also I need to track the user names and date times when particular folders have been modified. Windows shows the last modified time, but I need to track the history of modifications.

Operating System is Windows XP and File System is NTFS.

share|improve this question
I went through this link:…. It gives partial solution, like specific folders can be tracked. I tried to implement it. Even for file rename operation, it generates a Delete event log, which is fine. However, it will be helpful to know what is the renamed file name. – AllSolutions Oct 24 '12 at 20:39
Process Monitor, from, can probably help. I know you can set up a series of filters for it, but it does have an overhead. – user3463 Oct 24 '12 at 20:43
Process Monitor is probably a real time monitor. I need to track file and folder deletion and renaming operations for last 60 days. Windows Local Account Policy looks to be fine, but it does not capture the renamed file's new name. – AllSolutions Oct 24 '12 at 21:07
Also I want the logging to be done silently, without the user being aware of it. – AllSolutions Oct 24 '12 at 22:15

You must log in to answer this question.

Browse other questions tagged .