All geek questions in one place

Find out if WHO has made a recent change to Powershell files?

I have a shared network location for all users saving files. All users have full access to this location.

Is it possible to find WHO last modified a Powershell file or folder or in any other way?

There is no problem to get all the date and owner information from Powershell, but there seems to be no way to find out that WHO has made recent changes.

any idea please?

+6
source share
1 answer

The only user held against a file in NTFS is the owner. There is no record of who last modified the file.

However, Windows can check file system actions.

See http://support.microsoft.com/en-us/kb/310399 (says Windows XP in the title, but applies to later versions). This must be applied to the system where the file system is located.

+7
source

Source: https://habr.com/ru/post/984790/

More articles:


All Articles