I need to determine if a particular file was accessed in the last, say, 2 days.
Is this possible on Windows Server 2008 R2?
Windows – How to know when a file was last read or accessed on Windows
Securitywindows
Related Topic
- Windows – How to Add a Windows Environment Variable Without Rebooting
- Windows – How to disable the “last accessed” attribute on NTFS/Windows
- Security – How to Deal with a Compromised Server
- Security – Our security auditor is an idiot. How to give him the information he wants
- How to Connect to a Windows Server Using Command Line Interface (CLI)
- Windows – How to see what last batch was run on windows
Best Answer
After that fact? No, I do not believe so unless an auditing ACL was inherited from a parent or set directly on the file for the "read file" permission. If you DO enable file system auditing, you can then look at the security logs to find this information which most people will pipe or transfer to some kind of tool for parsing.
You can also take a look at using something like Tripwire for maintaining file integrity if that becomes a goal.