RE: Determining if someone copied file to a: drive

From: Frank Heyne (fhat_private-dresden.de)
Date: Wed May 30 2001 - 09:37:44 PDT

  • Next message: Frank Heyne: "RE: Registry Key LastWrite times"

    On 30 May 2001, at 8:14, mshines wrote:
    
    > Look in the Recent Files information...    which is displayed on the
    > Start -> Documents listing from the Task Bar.
    > 
    > The Recent Documents are also in the folder (which is really what is
    > displayed on the task bar) -
    > C:\Winnt\Profiles\<the profile of interest>\Recent
    > 
    > Hope this helps.  NT does leave a trace of the last few files touched.
    
    I would say this is not always true. For instance, when you copy a file with 
    explorer, nothing is written to the Registry. Only when you *open* a file with 
    the application it is registered for, this is sometimes written to the Recent 
    folders. But a sophisticated user can always manage to open a file without 
    leaving any trace in the Recent folder!
    
    
    Frank Heyne
    



    This archive was generated by hypermail 2b30 : Wed May 30 2001 - 17:47:44 PDT