Windows Server 2012 is a server in a workgroup with the role of a file server raised on it. A group of users who are allowed to work in a file server has been created, a file folder has been shared. Question: 1) How to view a report about which user worked with which file (edited, or overwritten a file, or maybe deleted)? 2) If you can not see the standard OS tools, can you write a script on PowerShell? I did not find it myself :)))

    1 answer 1

    For your purposes, you need to set up an audit of the file system and only then you can look at the server logs of the events that were performed on the files. Or parse them using third-party scripts. Here are two good (in my opinion) articles on setting up file auditing.

    https://habrahabr.ru/company/netwrix/blog/208892/

    https://habrahabr.ru/post/150149/