Menu
I have a shared network location for all users saving files. All users have full access to this location.
Is that possible to find out WHO made the last change to a file or folder by Powershell or any other way?
There is no issue to get all those date and owner info from Powershell, but looks like there is no way to find out WHO made the last changes.
any idea please?
441
To get the last modified file in the directory using PowerShell, use the Get-ChildItem cmdlet to get the items from the directory and use the LastWriteTime or CreationTime property.
Press the Windows Key + X and select Windows PowerShell (Admin). Type in wmic qfe list. You will see a list of updates including the HotFix (KB) number and link, description, comments, installed date, and more. Pretty neat.
To get the file owner using PowerShell, pass the file path to the Get-Acl cmdlet in PowerShell. Get-Acl cmdlet returns information about the file which can be used to determine the file owner.
The only user held against a file on NTFS is the owner. There is no record of who last modified the file.
However Windows can audit file system operations.
See http://support.microsoft.com/en-us/kb/310399 (says Windows XP in the title but applies to later versions). This needs to be applied to the system hosting the file system.
174
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With
