|
Posted by Steven L Umbach on November 14, 2005, 9:47 am
If you were Registered and logged in, you could reply and use other advanced thread options
You would have to has enabled auditing on the target folder first otherwise
you are out of luck. It sounds like she did have permissions before you
changed ntfs permissions on the folder whether you planned on the user
having access or not. There are also other ways to prevent user access to
sensitive data such as managing the user right for access this computer from
the network, Windows Firewall to selectively allow access to shares, and
ipsec. --- Steve
> Does the NET USE command leave any sort of evidence? We have a user
> suspected of connecting to a certain shared folder she should not have
> been allowed to access (this was prior to tightening the permissions on
> the folder and enabling auditing). Is there any way to check the history
> of NET USE on a client computer, to see whether the user actually did
> access the confidential shared folder?
>
> Thanks for any help!
>
>
|