sluice
-
Total Posts
:
7
- Scores: 0
-
Reward points
:
0
- Joined: 12/21/2009
-
Status: offline
|
NTFS Change Journal scripting
Sunday, January 29, 2012 11:41 PM
( permalink)
I want to find out if a folder's contents have changed and when. Is there a way to query the NTFS Change Journal for this information?
|
|
|
|
59cobalt
-
Total Posts
:
975
- Scores: 91
-
Reward points
:
0
- Joined: 7/17/2011
-
Status: offline
|
Re:NTFS Change Journal scripting
Monday, January 30, 2012 12:35 AM
( permalink)
No. You need to enable auditing on the folder and read the information from the security eventlog.
|
|
|
|
sluice
-
Total Posts
:
7
- Scores: 0
-
Reward points
:
0
- Joined: 12/21/2009
-
Status: offline
|
Re:NTFS Change Journal scripting
Monday, January 30, 2012 2:03 AM
( permalink)
If I enable auditing on the top level folder, will that record changes at the 2nd or 3rd level folders berneath it? Or must I specify all folders to be audited?
|
|
|
|
59cobalt
-
Total Posts
:
975
- Scores: 91
-
Reward points
:
0
- Joined: 7/17/2011
-
Status: offline
|
Re:NTFS Change Journal scripting
Monday, January 30, 2012 5:38 AM
( permalink)
Unless you disable inheritance, your settings should be automatically propagated to all child folders.
|
|
|
|
sluice27
-
Total Posts
:
2
- Scores: 0
-
Reward points
:
0
- Joined: 11/30/2011
-
Status: offline
|
Re:NTFS Change Journal scripting
Monday, January 30, 2012 6:18 AM
( permalink)
Thanks, 59cobalt. Very concise and what I was looking for. Now to get my head around MS LogParser!
|
|
|
|
59cobalt
-
Total Posts
:
975
- Scores: 91
-
Reward points
:
0
- Joined: 7/17/2011
-
Status: offline
|
Re:NTFS Change Journal scripting
Monday, January 30, 2012 8:09 AM
( permalink)
|
|
|
|