Audit on Windows Files

techmerlin,

…was it more trying to pick fault…

You are too quick to judge, young padowan. I was answering your questions, as I felt it was discourteous not to do so.

…you are testing everyone for an answer you claim to already have.

Testing? Not hardly. I have no need to test. I am simply tired of posting encyclopedic information based on a good deal of time and research, testing, and verification, only to have others not do the same.

And I really don't think this forum is the place to be suggesting such things. Better that you take this sort of thing off list, don't you think?

Harlan

keydet89

You are too quick to judge, young padowan. I was answering your questions, as I felt it was discourteous not to do so

Everyone has their own interpretation or 'opinion' if you will, thanks for outlining yours.

I can understand your statement about why you are not as open as some to share your information, I am not sure everyone here is out for that same purpose but I know many of us on the board take great interest in reading others insight on experience.

If you wish to share you insight on this I would enjoy reading it, if not..thanks for letting us know you have some insight.

Thanks

All

I've done a little searching and come up with the following hits

http//support.microsoft.com/default.aspx?scid=kb;en-us;310592

http//www.codecomments.com/Microsoft_Device_Drivers_Development/message689200.html

http//www.windowsitlibrary.com/Content/368/05/1.html - This is page 1 of 3.

Hope the above shed a bit more light on things.

> support.microsoft.com/...-us;310592

Interesting KB article…especially considering that I've check 4 XP systems, 3 of which are XP Pro, and all of which are SP2+…and not one has a Registry key named "HKEY_LOCAL_MACHINE\Enum".

Harlan

Hey all,

the registry key HKEY_LOCAL_MACHINE\Enum is a Win 95/98/ME reg key, have a look in the MSDN library here http//msdn.microsoft.com/library/default.asp?url=/library/en-us/install/hh/install/install-over_8f5ef1c3-94c3-48d5-8f9a-301b7f453cef.xml.asp this is a good read on this subject.

Thanks

Interesting. From the KB article itself

APPLIES TO
• Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional Edition
• Microsoft Windows XP 64-Bit Edition

Harlan

Harlan,

I agree, I am not sure who made the typo there but that is definatly a Win 98, 95 and ME reg key. XP uses HKLM/System/ControlSetxxx/Enum/ and I also have checked 4 differnt XP machines today (SP1, SP2) and they are all the same.

Hi All,

Thanks for all the suggestions, tests that you executed and comments so far.

At present what we found during our investigation is that all files that were possibly copied have all the same "Last Accessed" date/times. We started to identify and test which applications/programs or events could have caused this to happen. We are now eliminating the events where this is impossible and will then end up with a few scenarios where this is possible.

For example, if you select all files in a directory and drag and drop it into Nero for copying and then write it to disc. This should change the last accessed date and make all last accessed dates the same.

Regarding the devices, we have identified thanks to you all, the devices that was attached to the pc’s

I will let you all know the outcome…

FS

FrancoisSeegers,

> Regarding the devices, we have identified thanks to you all, the devices that was attached to the pc’s

Can you share your methodology for doing so?

H