Log about a file

nathan

New member
We have a problem at a school where "ntdetect" and "ntboot" keep getting deleted. Ofcourse windows doesnt like starting without those. We're not sure if this is a user/admin doing this, or if its some software.

Does anyone know of any little software packages that will make a log of what interacts with this file, or at what time it gets deleted and by what user. I'm sprouting alot of grey hairs from this as it keeps happening.

Just any help would be good, ta!
 
Back
Top