Working in an office, when all computers are connected into one network, when other employees of the company have access to folders and files, you risk one fine day not finding the file, folder or document you need. And then the question arises: where did it go, who could have removed it? Can you get information about who deleted a file from your computer? You can, you just need to enable auditing of access to files and folders.
Necessary
Personal computer, access as administrator
Instructions
Step 1
To do this, you need to go to the "Start" menu and click on the "Control Panel" option. In the window that opens, select the "Performance and Maintenance" option, in Windows 7 you need to select "System and Security". Go to the tab to the "Administration" item and open it by double-clicking the left mouse button. In the window that opens, select the "Local Security Policy" item. If the window did not open when you double-click the left mouse button, then right-click and open the login as administrator. In the new window, click on the "Local Policies" folder and then select the "Audit Policy" folder. It remains to click on the "Audit of access to objects" item.
Step 2
In the dialog box that opens, check the boxes either for the "Success" option (it will track all successful attempts to open the file) or for the "Failure" option (this option allows you to track unsuccessful attempts). To track all attempts to access files, you need to select two checkboxes. The last action is to press the "Ok" button.
Step 3
After establishing audit in the "Properties" of the folder you want to monitor operations, in the "Security" section, click the "Advanced" icon, select "Audit" and in the window that opens, click on the word "Advanced" and enter the name of the user or user group, whose actions with this folder will be monitored. Various user lists can be selected. It is also worth noting that you can always change these parameters following a similar operating principle. Now you will always be aware of who worked with the files and by whose negligence they disappeared. This function is useful for people who work in various companies for computers.
