Find Files By Date Accessed
How can I know when a file was last read or accessed on. Which restores the last accessed date back to the original value after it has accessed the files? Sorry in advance if this is in the wrong section, but what does 'date accessed' mean? You can only upload files of type PNG, JPG, or JPEG.
Del 1838 wrote: Many thanks for the reply i have a mixture of windows file servers and netapp filers will this work on the netapp as well as these would be cif shares? RegardsNetApp has pretty extensive imitation of CIFS, going as deep as supporting the same APIs for file access and even audit trails. It should work, so I would try, but there might be some minor incompatibilities. But keep in mind that file owner in file attributes may not always reflect the true owner of the data and sometime it shows the primary group of user account who created a file.
To perform detailed usage analysis you may look into enabling file system auditing (both NetApp and Windows Server support it in the same way), run it for a while and then after 2-3 months remove files that are not being accessed. Manual analysis is possible, but it'll take a while. You might also want to look at utilities like TreeSize () if it's a one-time thing. Michael (Netwrix) wrote: Bill Kindle wrote: I really wish vendors would engage more instead of jumping straight into a sales pitch. That's true. There's no value in such participation otherwise. Personally, I will respect a vendor more if they just demonstrate a couple of behaviors: • Talk like a real person. Not every post has to be a sales pitch.
I understand as a vendor it's your job to make a sale, I get that. 3ds Emulator Pc. We all have jobs to do. But you build a following by sharing knowledge and insight into an issue being talked about in a post. If done right, well, flies to honey.. • They understand this phrase: Customer Satisfaction is WORTHLESS. Customer Loyalty is PRICELESS. Take care of the customer, always. That builds loyalty, which leads to more sales.
Need examples? Take a look at how HP, Unitrends and Pertino engage the community. If you are wondering where that phrase I used above came from, Google 'Jeffery Gitomer'.
I just found out that someone went snooping through my computer a few days ago. I want to know if there is a way to see exactly what files (documents/pictures) that they opened. I tried adding the 'Date visited' header in windows explorer but that doesn't have any data.
The 'Date Accessed' header only seems to store the time when the file was created. Another possible solution which I tried was using.
This program does what I need but it only lists up to 138 files. Any help would be greatly appreciated.
On any given folder, in the right pane, right click on the name header and select 'more.' , then scroll down to 'Date Accessed' and tick the box, it will now show the date and time if any thing was written, changed or deleted from the folder (write), it will not show if it was just opened and looked at (read), something has to change for the date to be updated. This will not show you who accessed it, it could be a user or the system itself..
To enable Last Accessed (which will time stamp for a read and write), open an elevated command prompt and type this i and hit Enter There will be a system performance hit if you enable it. Fsutil behavior set disablelastaccess 0 To disable it fsutil behavior set disablelastaccess 1. If you had Last Access updates disabled, you're out of luck. But if it was enabled, you should find a file search software that can search by this attribute. As an alternative, can give you a list of all files on a disk in a matter of seconds, then you sort by clicking on the 'Accessed' column and scroll to the needed time. If you're trying to detect actions of a malicious software, chances are it's smart enough.
An aware user could also try to hide his activity by disabling and reenabling the feature or overwriting the Last Accessed timestamp with an old date post factum.
- by admin