+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Folder Access in Technical; Hi Without setting up a GPO to Audit a folder. Is there some program that can tell me when a ...
  1. #1
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Folder Access

    Hi

    Without setting up a GPO to Audit a folder.

    Is there some program that can tell me when a folder in the shared folder was accessed.. not modified.... but just opened ?

    As there are tons of folders in the share and i want to start pruning :-)

    Many Thanks

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Folder Access

    NTFS does not record access times.

  3. #3
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Folder Access

    Quote Originally Posted by Geoff
    NTFS does not record access times.
    It does if you put an audit on... but if i did that my logs would be full in hours...


    What i need is something like Treesize pro that can tell me the size as well as the last access of the folder....

  4. #4
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Folder Access

    any ideas?

  5. #5

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,708
    Thank Post
    3,244
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364

    Re: Folder Access

    maybe the FSO ( File System Object )

    http://www.tutorial-web.com/asp/fso/...teLastAccessed

  6. #6
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Folder Access

    Quote Originally Posted by gecko
    maybe the FSO ( File System Object )

    http://www.tutorial-web.com/asp/fso/...teLastAccessed
    Many thank... but I think this will give me when the folder was accessed by a seacrh or any other process...

    "Determines the date the folder was last accessed by a process"

    I am looking for a user access program

  7. #7

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,708
    Thank Post
    3,244
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364

    Re: Folder Access

    Is this shared folder located on the server i take it ?

    Would you mind having a script that ran every so often on the server if it is located on the server ?

    Aside from that then it would be a case of enabling auditing that or using a program like everest or siw.

  8. #8

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Folder Access

    Quote Originally Posted by Grommit
    Quote Originally Posted by Geoff
    NTFS does not record access times.
    It does if you put an audit on... but if i did that my logs would be full in hours...
    The audit isn't a feature of NTFS. If NTFS did record the access times you could interrogate the filesystem... I believe that this is what Geoff is getting at.

  9. #9

    mac_shinobi's Avatar
    Join Date
    Aug 2005
    Posts
    9,708
    Thank Post
    3,244
    Thanked 1,048 Times in 970 Posts
    Rep Power
    364

    Re: Folder Access

    Quote Originally Posted by Grommit
    Quote Originally Posted by Geoff
    NTFS does not record access times.
    It does if you put an audit on... but if i did that my logs would be full in hours...


    What i need is something like Treesize pro that can tell me the size as well as the last access of the folder....
    So tell me this, how does tree size pro manage to do it then ?

    Also just a thought but cant you do an audit and use wmi to filter out the results so that it only audits what you want it to and hence not fill up the audits as fast as it normally would... ??

  10. #10

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Folder Access

    Quote Originally Posted by Geoff
    NTFS does not record access times.
    Are you sure about that? It may not record the user who last accesed the file but it does record last access times. You can view in explorer by adding an extra couln to the details view. Alternatively, from the command line you can also do this
    Code:
    DIR /TA
    Only problem is that some back-up software may reset access times while reading files to be backed up.

  11. #11

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,590
    Thank Post
    109
    Thanked 762 Times in 593 Posts
    Rep Power
    180

    Re: Folder Access

    I was under the same impression as Geoff, only creation and modification times are recorded.

    I may (and probably am) wrong. Maybe one of ChrisH's magical books would help

  12. #12

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Folder Access

    Occassionally you see adivce in books or artices that you can increase file system performance by stopping acces time being recorded. Maybe this is what was done on systems you have you have come into contact with.

  13. #13

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115

    Re: Folder Access

    There are four timestamps associated with a file: The ones you can see in Explorer [created, modified, accessed] & one associated with the MFT entry that the forensics folk probably don't want you know about.

    If you have processes automatically reading files (anti-virus scans?), none of those are much use as a "no one has used it for ages" detector.

    YMMV, but disabling the recording of NTFS last access times certainly can help file system performace - useful if the system spends a lot of time reading lots of folders and little files.

SHARE:
+ Post New Thread

Similar Threads

  1. Folder access - Data Protection Act - How do you do it?
    By Paid_Peanuts in forum How do you do....it?
    Replies: 7
    Last Post: 29th August 2007, 11:39 AM
  2. Folder redirection
    By kerrymoralee9280 in forum Windows
    Replies: 3
    Last Post: 3rd August 2007, 09:30 AM
  3. ? folder
    By davyboi in forum Mac
    Replies: 3
    Last Post: 30th March 2007, 12:13 PM
  4. Replies: 15
    Last Post: 12th October 2006, 09:37 PM
  5. Allowing access to a single folder on C:
    By Ric_ in forum Windows
    Replies: 5
    Last Post: 2nd November 2005, 11:51 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •