Announcement

Collapse
No announcement yet.

Find Last modified user for a file

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Find Last modified user for a file

    Hi

    Is there a way to find out the last user that modified a file on a Windows 2003 Server?

    Example:
    I have a file.doc that was created by user1 so user1 is the Owner.

    The file.doc was then modified by someone, does Windows have an option to see who was the last to edit the file?

    Or is that a third party software?

    Thanks

  • #2
    Re: Find Last modified user for a file

    Since its a word document, it might be in the metadata
    Try Opening it in Word, then select FILE--PROPERTIES and if there is an advanced option, use that

    This will (obviously) not work for all file types!
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Find Last modified user for a file

      You can also use the Object Access Auditing policy option as per this step by step: http://articles.techrepublic.com.com...1-5034308.html

      You'll probably notice the warnings in there as well, but be cautious when enabling this type of auditing as it bogs you machine down with the amount of events it generates if not planned properly.
      But if done right though, it gives you all the info you are after.
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment

      Working...
      X