0

One of our shared network drives has a few folders that at random times get the hidden attribute making it look like the folders have dissapeared for the regular users.

Share resides on a Windows 2008 R2 server, all clients are Windows 7.

Antivirus is being kept up to date.

Is there any way how to track from where is the hidden attribute being set ?

Improve this question

1 Answer 1

Reset to default
0

If the date-time of the folder changes when the attribute does, you might monitor what process was running then.

A free tool to monitor folders is Folder Changes View from Nirsoft. Though it records, "every filename that is being modified, created, or deleted while the folder is being monitored", I do not know if it will trap an attribute change.

If Folder Changes View is not sufficient, MS does provide the Sync Framework 2.1 that could be used to create a small application to monitor the folder.

Improve this answer
1
  • The date-time stays the same after each hidden episode. For the most part, folders were created by server local admin account. This should prevent certain changes to the folders from users that don't have modify or full access for it's permissions. Tried Folder Changes View but it does not record the attribute change unfortunately.
    – Link
    Apr 13, 2015 at 16:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .