tripwire?

[tty0]

Hi all,
I have a client that has windows xp home (not pro) i realise this forum is for pro but there is no home forum so i thought i would give it a shot.

They have a set of files that they are suspisious of someone else viewing them. If you right click a file the last accessed property shows the date you right clicked on it so you cannot actually tell the last time it was accessed before then. Is there any way using WMI or some other means that you can find out the last accessed times on a file or folder?

PS i know the subject says tripwire but there is no system like that on the computer it is literally a stock install of xp home.

any help greatly appreciated

cheers
tty


'mi casa es su casa'
]-=tty0=-[

 

[linney]

What file system is he using, if it is NTFS, then you have file access permissions, you can use these to set file access. Without extra steps (see below), Security is controlled and set via Safe Mode in XP Home.

XP Home, misses out on Encryption, but PRO has that. You can however password protect files with third party programs like WinZip.

To improve his security look at these -

If you have a NTFS partition try these links to beef up Home to something more configurable that you may be able to use to block access.

http://www.dougknox.com/xp/utils/xp_securityconsole.htm

http://www.dougknox.com/xp/tips/xp_home_sectab.htm

307881 - HOW TO: Convert a FAT16 or FAT32 Volume to NTFS in Windows XP

http://support.microsoft.com/default.aspx?scid=kb;en-us;307881&FR=1&PA=1&SD=HSCH

You can Google and see if there are programs out there that will help with your problem.

12Ghosts™ FileDate

http://www.12ghosts.com/ghosts/filedate.htm

Removing adware & spyware
faq608-4650

Try the free version of "Ewido"

http://www.ewido.net/

Windows Defender

http://www.microsoft.com/athome/security/spyware/software/default.mspx

Have a look around here too at the File and Disk utilities, and also look at their Rootkit Revealer.

http://www.sysinternals.com/Utilities.html

http://www.sysinternals.com/utilities/rootkitrevealer.html

Or just keep the files on CD and not in the machine.