I have a user that we're suspecting may be coping data. Is there a way of
auditing a user or computer based on coping data?





Thanks,

You can audit any file or folder after you have enabled auditing of object
access first. Having said that trying to audit a user copying files is
almost certainly futile as a copy operation is a read and then write and the
write could be to anywhere the user has write access including removable
media that can not be audited. Auditing of folders and files is not a user
friendly operation either and auditing read access does not prove much
itself since the user could be legitimately accessing the folder. See the
link below for how to audit a folder if still interested. Your computer
user policy should have strict guidelines on copying sensitive data with
spelled out consequences which may help deter such activity. --- Steve

http://support.microsoft.com/default...b;en-us;300549

"Peretz Stern" <peretzstern@optonline.net> wrote in message
news:%23Ruf$S0zFHA.736@tk2msftngp13.phx.gbl...
>I have a user that we're suspecting may be coping data. Is there a way of
>auditing a user or computer based on coping data?
>
>
>
>
>
> Thanks,
>
>

Auditing? See Windows, Help and Support.

Peretz Stern wrote:

> I have a user that we're suspecting may be coping data. Is there a way of
> auditing a user or computer based on coping data?
>
>
>
>
>
> Thanks,
>
>

Although I'm not the OP, I searched
Help and Support as you suggested
out of curiosity. Got one hit on the
keyword "auditing" and that pointed
to the glossary. Checked the glossary
and "auditing" wasn't in it. Tilt!

"Bob I" <birelan@yahoo.com> wrote in message
news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl...
> Auditing? See Windows, Help and Support.
>
> Peretz Stern wrote:
>
>> I have a user that we're suspecting may be coping data. Is there a
>> way of auditing a user or computer based on coping data?
>>
>>
>>
>>
>>
>> Thanks,
>>
>>
>

This will do the trick:

http://www.winwhatwhere.com/

Not free but not too expensive.

rather odd. Are you using XP? Help provides 15 hits locally and another
30 in the Knowledge Base Article. And the local ones contain "How to"

Uncle Joe wrote:

> Although I'm not the OP, I searched
> Help and Support as you suggested
> out of curiosity. Got one hit on the
> keyword "auditing" and that pointed
> to the glossary. Checked the glossary
> and "auditing" wasn't in it. Tilt!
>
> "Bob I" <birelan@yahoo.com> wrote in message
> news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl...
>
>>Auditing? See Windows, Help and Support.
>>
>>Peretz Stern wrote:
>>
>>
>>>I have a user that we're suspecting may be coping data. Is there a
>>>way of auditing a user or computer based on coping data?
>>>
>>>
>>>
>>>
>>>
>>>Thanks,
>>>
>>>
>>
>
>

Yes, I'm using XP Home SP2. Didn't access MS Knowledge Base online,
just the local Help and Support search facility on my system. Got just one hit.
Was surprised by that.

"Bob I" <birelan@yahoo.com> wrote in message news:e2QI6yB0FHA.2652@TK2MSFTNGP14.phx.gbl...
> rather odd. Are you using XP? Help provides 15 hits locally and another 30 in the
> Knowledge Base Article. And the local ones contain "How to"
>
> Uncle Joe wrote:
>
>> Although I'm not the OP, I searched
>> Help and Support as you suggested
>> out of curiosity. Got one hit on the
>> keyword "auditing" and that pointed
>> to the glossary. Checked the glossary
>> and "auditing" wasn't in it. Tilt!
>>
>> "Bob I" <birelan@yahoo.com> wrote in message
>> news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl...
>>
>>>Auditing? See Windows, Help and Support.
>>>
>>>Peretz Stern wrote:
>>>
>>>
>>>>I have a user that we're suspecting may be coping data. Is there a way of auditing a
>>>>user or computer based on coping data?
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>Thanks,
>>>>
>>>>
>>>
>>
>>
>

This facility is unavailable on Windows XP Home Edition

--
--------------------------------------------------------------------------------------------------
http://webdiary.smh.com.au/archives/...nt/001075.html
=================================================
"Uncle Joe" <Uncle Jose@anonymous.net> wrote in message news:O9sexVh0FHA.664@tk2msftngp13.phx.gbl...
> Yes, I'm using XP Home SP2. Didn't access MS Knowledge Base online,
> just the local Help and Support search facility on my system. Got just one hit.
> Was surprised by that.
>
> "Bob I" <birelan@yahoo.com> wrote in message news:e2QI6yB0FHA.2652@TK2MSFTNGP14.phx.gbl...
>> rather odd. Are you using XP? Help provides 15 hits locally and another 30 in the
>> Knowledge Base Article. And the local ones contain "How to"
>>
>> Uncle Joe wrote:
>>
>>> Although I'm not the OP, I searched
>>> Help and Support as you suggested
>>> out of curiosity. Got one hit on the
>>> keyword "auditing" and that pointed
>>> to the glossary. Checked the glossary
>>> and "auditing" wasn't in it. Tilt!
>>>
>>> "Bob I" <birelan@yahoo.com> wrote in message
>>> news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl...
>>>
>>>>Auditing? See Windows, Help and Support.
>>>>
>>>>Peretz Stern wrote:
>>>>
>>>>
>>>>>I have a user that we're suspecting may be coping data. Is there a way of auditing a
>>>>>user or computer based on coping data?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>Thanks,
>>>>>
>>>>>
>>>>
>>>
>>>
>>
>
>

I guess if the system can't do it, then there aren't any instructions
for Help to refer to. Curious as to what it found in the glossary that
wasn't "auditing".

Uncle Joe wrote:

> Yes, I'm using XP Home SP2. Didn't access MS Knowledge Base online,
> just the local Help and Support search facility on my system. Got just one hit.
> Was surprised by that.
>
> "Bob I" <birelan@yahoo.com> wrote in message news:e2QI6yB0FHA.2652@TK2MSFTNGP14.phx.gbl...
>
>>rather odd. Are you using XP? Help provides 15 hits locally and another 30 in the
>>Knowledge Base Article. And the local ones contain "How to"
>>
>>Uncle Joe wrote:
>>
>>
>>>Although I'm not the OP, I searched
>>>Help and Support as you suggested
>>>out of curiosity. Got one hit on the
>>>keyword "auditing" and that pointed
>>>to the glossary. Checked the glossary
>>>and "auditing" wasn't in it. Tilt!
>>>
>>>"Bob I" <birelan@yahoo.com> wrote in message
>>>news:%23EDI9L2zFHA.2652@TK2MSFTNGP14.phx.gbl...
>>>
>>>
>>>>Auditing? See Windows, Help and Support.
>>>>
>>>>Peretz Stern wrote:
>>>>
>>>>
>>>>
>>>>>I have a user that we're suspecting may be coping data. Is there a way of auditing a
>>>>>user or computer based on coping data?
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>Thanks,
>>>>>
>>>>>
>>>>
>>>
>
>