Shared Folder Forensics

Shared Folder Forensics

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Shared Folder Forensics Bruce Wayne 11-14-2005
Posted by Bruce Wayne on November 14, 2005, 8:39 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Does the NET USE command leave any sort of evidence? We have a user
suspected of connecting to a certain shared folder she should not have been
allowed to access (this was prior to tightening the permissions on the
folder and enabling auditing). Is there any way to check the history of NET
USE on a client computer, to see whether the user actually did access the
confidential shared folder?

Thanks for any help!



Posted by Steven L Umbach on November 14, 2005, 9:47 am
If you were  Registered and logged in, you could reply and use other advanced thread options
You would have to has enabled auditing on the target folder first otherwise
you are out of luck. It sounds like she did have permissions before you
changed ntfs permissions on the folder whether you planned on the user
having access or not. There are also other ways to prevent user access to
sensitive data such as managing the user right for access this computer from
the network, Windows Firewall to selectively allow access to shares, and
ipsec. --- Steve


> Does the NET USE command leave any sort of evidence? We have a user
> suspected of connecting to a certain shared folder she should not have
> been allowed to access (this was prior to tightening the permissions on
> the folder and enabling auditing). Is there any way to check the history
> of NET USE on a client computer, to see whether the user actually did
> access the confidential shared folder?
>
> Thanks for any help!
>
>



Similar ThreadsPosted
Shared Folder Permission April 21, 2007, 6:36 am
Problem with Shared folder December 29, 2007, 3:41 pm
Auditing shared folder April 7, 2008, 1:02 pm
Shared folder security settings June 24, 2005, 9:08 am
Grant permission to a shared folder in XP or W2000 February 16, 2006, 6:21 am
Making a shared folder accessible to anyone from network August 13, 2006, 7:01 am
Auditing Attempted Shared Folder Access March 5, 2007, 10:28 am
Need utility to view shared folder permissions November 11, 2008, 9:58 am
deny delete folders/files from a shared folder on the network September 19, 2006, 6:56 am
How to force a (the same !) user to logon when connecting to a network shared folder ? March 4, 2007, 8:19 am

The site map in XML format XML site map

Contact Us | Privacy Policy