Imagine that you have a shared folder but you want to know if someone changes something. You, for sure, have heard about auditing files before and may never had a chance to take advantage of this feature. Here you will find a way to do it.
With Windows 7 we can control when a folder has changed and show a message to us.
I know this post can be a little complex, but believe me, the best way to control your computer is knowing how works.
So, why not start from the beginning?
Press WinKey + R, type gpedit.msc, and press Enter.
Go to Local Computer Policy, Computer Configuration, Windows Settings, Security Settings, Local policies, Audit Policy.
Double click over Audit object access.
Select Success, this way the message will only pop when something has changed.
Other way to do this is not granting permission to files and see how someone try to change it.
Right click over the folder you want and select properties.
Select the security tab.
Press Advanced, go to auditing tab and press continue.
You can choose the users you want to audit. If you prefer to do it for all select everyone.
A list of check boxes appears:
Select Create files / write data , Create folders / append data, Delete subfolders and files and Delete.
This way the operating system creates an event when something changes on the folder. Press Ok on every open window. If you finish now, those messages appears on the event viewer.
We are going to complicate the thing a little bit, creating a scheduled task that shows a message when this happens. Don’t do this if this folder is accesed by a lot of people.
Press WinKey + R type control and press Enter, System and Security.
Select Schedule tasks.
Press Create Task, on the right pane.
A window appears asking you to type a name for the task you are going to create.
Select Triggers Tab, and go to New. You can specify when the task begins, in this case we are going to choose by an event. The rest will show the same as this image:
As you see the message appears if there is an auditing event. This doesn’t discriminate if is in other folder.
Go to Actions tab, press New
Select Action, Start a program:
In the Program/script type msg:
Now in the arguments type the following:
* /server:localhost Someone is writing in your folder
Now if you change something in that folder, the next message appears: