Is network access logged any where on windows by default

2

I accidentally shared my C drive – what should I be worried about? and would like to know who may have accessed my files. Is this information stored any where?

Sam

Posted 2011-09-12T16:10:40.787

Reputation: 65

Answers

2

By default on Windows 7 there is no logging of network activity. It may be enabled, you can check. If it isn't enabled, then can enable it.

To enable auditing do the following:

  • Open Control panel
  • Administrative Tools
  • Local Security Policy
  • Open Local Policies
  • Audit Policy

From there you can enable auditing events.

If auditing is enabled then you can view the events in the Security Event log.

To view events:

  • Open Control panel
  • Administrative Tools
  • Event Viewer
  • Security

Zoredache

Posted 2011-09-12T16:10:40.787

Reputation: 18 453

0

You have little to nothing to worry about. Even if you gave people read/write permission thought the share, the file systems security takes a higher precedence and no one without appropriate permissions would be able to do anything.

In other words, they could not do anything they could not have already done before the share.

Keltari

Posted 2011-09-12T16:10:40.787

Reputation: 57 019

Of course if the guest account was enabled, he had users with no passwords, or had granted more permissions then required then he may have cause for concern. Your answer doesn't seem to directly answer the question. – Zoredache – 2011-09-12T16:45:21.097

@Zoredache Your points are irrelevant. The question is about a network share, nothing you mentioned would have access to the file system through a share. – Keltari – 2011-09-12T16:50:54.717