How can I check that who accessed my shared folder? - Microsoft Q&A (2024)

Hello

Thank you for your question and reaching out.
I can understand you are having some issues \ queries related to know who has accessed shared folder.

Using Local Security Policy Editor, you can administer security settings on a workstation,The Audit Object Access policy in LSPE permits administrators to keep track of who views or modifies a file or folder. After enabling this policy on a computer, set up auditing on the appropriate file in order to see, via Event Viewer, who accessed it.

  1. From Run -> "secpol.msc" into the search field, and then press "Enter" to open Local Security Policy.

Expand "Security Settings" and "Local Policies," and then click the "Audit Policy" folder.

3.
Double-click "Audit Object Access" in the right pane to open the Audit Object Access Properties dialog box.

4.
Check "Define These Policy Settings," check "Success," and then click "OK" to monitor file access.

5.
Press "Windows-E" to open File Explorer, navigate to the appropriate folder, right-click the target file and select "Properties" from the context menu, and then click "Security."

6.
Click the "Advanced" button, click the "Auditing" tab, and then click "Continue." Click the "Add" button, and then click the "Select a Principal" link.

7.
Type the name of a user or group into the available field, click "Check Names," and then click "OK."

8.
Select "Success" from the "Type" drop-down menu, select the appropriate permissions for the user or group, and then click "OK."

9.
Repeat Step 6 through 8 for each user or group, and then click "OK" to close each window.

Check File Access
1.
Press "Windows-W," type "event," and then select "View Event Logs" from the results.

2.
Expand "Windows Logs," and then click "Security." Select "Filter Current Log" from the left pane, and then enter "4663" (without quotes) into the "<All Event IDs>" field.

3.
Choose "Audit Success" from the "Keywords" drop-down menu, and then click "OK" to create the filter.

4.
Select the first item in the log, and then check the Object Name field on the General tab to see which file was accessed. Select the following item in the log until you find the appropriate event.

5.
Review the Subject field on the General tab to see which network user accessed the file last.

--If the reply is helpful, please Upvote and Accept as answer--

How can I check that who accessed my shared folder? - Microsoft Q&A (2024)

FAQs

How to check who is accessing the shared folder? ›

Open “Windows Explorer” and navigate to file share that you want to audit. Right-click the file and click “Properties” in the context menu. Switch to “Auditing” tab which displays already existing auditing entries.

Can you see who has accessed a shared OneDrive folder? ›

To see a snapshot of all activities and comments on any file in OneDrive, use the details pane on your files. There you can also see who has access to a file.

Can you see who opened a file in a shared drive? ›

You can only see who viewed your Google Drive files if you shared them with specific individuals or groups. If you shared the file with “anyone with the link” or set it to the public, you wouldn't be able to track who accessed it. Lastly, you must have edit access to the file in question.

How can I see who accessed my Windows file? ›

To see who reads the file, open “Windows Event Viewer”, and navigate to “Windows Logs” → “Security”. There is a “Filter Current Log” option in the right pane to find the relevant events. If anyone opens the file, event ID 4656 and 4663 will be logged.

Who has access to a folder? ›

Access the Properties dialog box. Select the Security tab. The top portion of the dialog box lists the users and/or groups that have access to the file or folder.

How to see who is accessing a file on a server? ›

On the remote desktop server right click on the taskbar and select Task Manager. Next, select the User tab. If you suspect a specific user has a file open, choose that user. Often Word or Excel documents will display the username of the person who has the file locked.

How do I track user activity in OneDrive? ›

You can view the activities in the OneDrive report by choosing the Activity tab. Select Choose columns to add or remove columns from the report. You can also export the report data into an Excel . csv file by selecting the Export link.

Who last accessed a file in Windows? ›

Under the File Audit tab, go to Access Audit and click All File/Folder changes report to get details on the who, when, and where of all the changes made to the files. To view all the read accesses made to the file, go to Access Audit under the File Audit tab and generate the Read Events report.

How can I tell who deleted files from a shared drive? ›

You can use file system object access event auditing to identify a specific user who created, deleted, or modified a specific file.

Can you track activity on a shared Google Drive? ›

Google Drive keeps a change log for each user and shared drive. Each has their own record of changes to items that are of interest to them. To track changes for all items visible to a user, both the user change log and the change logs for all shared drives the user is a member of need to be replayed.

How to tell if someone accessed a file? ›

An Easy Way To Check If Your Files Have Been Accessed By Someone Else
  1. Click Start -> Administrative Tools -> Windows Security.
  2. Expand Local Policy -> Audit Policy -> Audit File System.
  3. Enable auditing with both a successful and unsuccessful file access.
Mar 16, 2022

How to tell if a file has been accessed? ›

When you right-click on the file > Properties > General tab > Do you see "Created, Modified and Accessed"? Press Win key + R to open Run > Type shell:recent and hit enter > Change View to Details > Find your file and see its details.

Can you tell if someone accessed your computer? ›

You can detect remote access by checking the processes on your device. Sometimes spyware and other malware are running in the background. You can also check your active network connections for monitoring programs and review your installed applications for unauthorized software.

How to check audit logs for OneDrive? ›

Go to the Audit tab. Select OneDrive for Business in the left pane and choose the audit report of your choice. You can filter the audit data based on business hours, domains or other attributes as per your needs.

How do I show owners the name of people who viewed their files in OneDrive? ›

Step 2: Click on Admin from the left pane and navigate to All admin center > OneDrive. Step 3; Switch to the Sharing tab. Step 4: Expand the Advances settings for sharable links section. Step 5: Scroll down and check the Display to owners the names of people who viewed their files checkbox.

Can my employer see my OneDrive files? ›

The OneDrive library provided for you is typically protected from public viewing by default. Only you can access personal documents and media files that you store in it unless you explicitly share a folder of documents or a single document with other people in your organization for reviewing or co-editing.

Can you see how many times a document has been viewed in SharePoint? ›

As a SharePoint in Microsoft 365 site owner, you can view information about how users interact with your site. For example, you can view the number of people who have visited the site, how many times people have visited the site, and a list of files that have received the most views.

Top Articles
Latest Posts
Article information

Author: Rob Wisoky

Last Updated:

Views: 5744

Rating: 4.8 / 5 (48 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Rob Wisoky

Birthday: 1994-09-30

Address: 5789 Michel Vista, West Domenic, OR 80464-9452

Phone: +97313824072371

Job: Education Orchestrator

Hobby: Lockpicking, Crocheting, Baton twirling, Video gaming, Jogging, Whittling, Model building

Introduction: My name is Rob Wisoky, I am a smiling, helpful, encouraging, zealous, energetic, faithful, fantastic person who loves writing and wants to share my knowledge and understanding with you.