Auditing for everyone on create, read, write access and then parsing the audit logs, would help you out.
Z Edward E. Ziots Network Engineer Lifespan Organization MCSE,MCSA,MCP,Security+,Network+,CCA Phone: 401-639-3505 ________________________________ From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 21, 2008 10:47 AM To: NT System Admin Issues Subject: Monitoring program Anyone know of a product, or process, that I can use to find out who changed a file at 9:00 last night? That's an example, but I would like to be able to tell what user account last changed a file. Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
