Get the network userid from the last person to update

[Valeriya]

Good morning Guys,
I don't know much about network security.
All our department MS Access databases located on network drive were corrupted recently.

Since IT department running a backup everyday, we've restored everything very easily.
Now they are working on setting up a permissions for every folder on the drive, to prevent this in a future.
1. However,I'm trying to figure out if there is a way to track who made this changes?
MSysObjects is a very handy tool, but it doesn't support a User ID info.(we don’t' use password in Access)
Our OS is Microsoft Windows XP Profession.
To first log in to PC, everyone using Windows User Name and Password.
Access Databases that were corrupted were not spitted databases.

2. Basically my question is: Is there a way to get the network userid from the last person to update a database and the modifications they made?
3. When I'm looking at the list of files located on the drive, I have an option to add more details to display, such as Date Created, Date Modified, Date Accessed or OWNER and so on.
The OWNER field is still a little bit confusing, I believe that it shows the User ID of a person, who last made a major modification to the file/folder(e.g. delete table, create table, change field name and so on)?
Thank you in advance!
Valeriya

 

[bambock]

One thing you can do is enable file auditing via Group Policy in the Windows environment. The audit trail is logged to the system's security log, which you can parse with Microsoft's "Log Parser". Google "object auditing + Windows," and you should find some documentation on how to implement this.

A word of caution though, is to be judicious in your configuration, heavy auditing on a large number of files and folders could be taxing on your system.

core