Here is a puzzler for all you google gurus

[Jake]

We are having somewhat of a problem with admin staff moving files around, deleting them, renaming them, putting them into folders etc. They are doing this on a shared storage area. This is causing some issues where people cant find stuff, and then results in "I didnt move it" "I didnt rename it" and so on.

So what we are looking for is something which will track everytime someone renames/moves/deletes/copies a file, the filename, when it was done, which user, what the new filename/location is. Then produce a log of that information (either after the event or live), and automatically save that log each day.

Looking around we found http://www.data-security-software.com/ , which tracks stuff pretty well but doesnt automatically save the log, requiring us to save the log each day and clear the log ready for the next day which isnt awfully practical.

Bit of a long shot I know, but anyone seen/heard of anything which will do what we want?

[Ravening_Wolf]

I think software like this should be installed as standard on any network which teachers might access

[Geoff]

What about turning the Indexing Service on. That'd at least speed up searches so people could find things when they get moved.

Also, if these are mainly documents. What about using a Document Management System such as SharePoint?

[Jake]

Yeah, its become pretty annoying, with admin staff insisting that the server is losing/deleting files. Interestingly the files seem to eventually turn up, in a totally different directory, under a different name several days later.

If we could find something to do the things above, then at least we can turn round and say "oh yes you did rename it and move it...lookie...shows right here that you renamed it to "I am a flid.doc" on Tuesday and moved it into the "Self Evaluation" folder

[Jake]

Its not so much just the moving of stuff, its that stuff is being renamed and moved about , deleted etc, and of course "nobody" did it.

Did wonder about Sharepoint, will it track renaming/moving/deleting to the username/time/date of the event?

[Ravening_Wolf]

Sharepoint will allow you to keep one copy of a document in a specified location which is then accessible to users according to their permissions. People can take local copies and do what they like to them, but the original is effectively set in stone unless the user has the right permissions to modify said file.

Very, very useful system - I want our school to implement it so we can rid ourselves of the dreaded Winpool.

[Jake]

hmm...will that allow a document to be edited on the server, and be accessible by others. But not allow the person editing the file to be allowed to rename the file. We have a need for files to be edited and then read by another member of admin, but obviously we wouldnt want them to be able to rename the file that they can edit otherwise we still end up in the situation where people randomly rename stuff

[mac_shinobi]

you got R2 for server 2003 ( obviously ) ?

[Jake]

We have it yeah, but not installed on the admin server as it wanted to upgrade the forest. We could go to R2, but because of the forest would be a slightly lengthier (in terms of time to setup) solution than we are hoping for

[acb_]

Its not so much just the moving of stuff, its that stuff is being renamed and moved about , deleted etc, and of course "nobody" did it.

Oh yes, oh yes, oh yes.

I have been known, on occasion, to trawl through the Audit Logs to prove to the individual who reported the mysterious loss that it was caused by a human agent, in fact, quite often by them...

[mac_shinobi]

If these files are on a shared drive, why not just change the permissions for that shared drive so they can only copy from it to there home area and hence the stuff on the shared drive wouldnt allow them to move, delete or w/e else , that way if they wanna do that they can copy it to there home area and alter it as they ( as in that particular end user ) see's fit then there wont be any need to trawl through logs to see who did what and when

Just a thought

[mac_shinobi]

Not sure how much this helps but faronics seem to have some good products available :

http://www.faronics.com/html/product.asp

[mac_shinobi]

Found something that may help but will probably cost :

http://manageengine.adventnet.com/products/roboiq/

Has file system monitors that can monitor specific files, folders etc and has other features as well

[Jake]

If these files are on a shared drive, why not just change the permissions for that shared drive so they can only copy from it to there home area and hence the stuff on the shared drive wouldnt allow them to move, delete or w/e else , that way if they wanna do that they can copy it to there home area and alter it as they ( as in that particular end user ) see's fit then there wont be any need to trawl through logs to see who did what and when

Just a thought

Well the problem is that multiple people need to amend files and then upload those files to the shared area for others to use/amend. For example, a folder called Reports has Document A in it on the shared area. User 1 , needs to make amendments to Document A, then at some point later, User 2 needs to use Document A and alter it again, then the next day User 3 needs to use Document A.

IF I am reading what you wrote right, it wont work because User 1 can only alter Document A in their own area and cant then re-up it to the Reports folder on the Shared area for User 2 , 3, 4 etc to amend and use. Unless User 1 has write permissions to the Reports folder...but then that will allow User 1 to also rename the files/plonk stuff in there which shouldnt be there etc , which will continue to cause the problem of stuff being renamed and not being able to be found by other Users

Thanks for the other 2 links, we have some Faronics products, so will take a look at those tomorrow

[mac_shinobi]

how many users are you planning on doing this for because if its only say 10 teachers or so then you could just give them one folder each that way they only have permission to copy the original and then put it back into there own folder on the same shared drive and give each person rights only to there own folder and that way they each have there own copy and ammended version of the original.