file search utility

From the root of each drive:
dir filename.ext /s
/s - recurses subdirectories, doesn't guarantee they didn't rename it or move it to their local drive or renamed it on their local drive. You almost need to run a filefind from nortons or start/find search in windows ran from each machine for something in the file.

Try this. I am unsure about network searching, but I use this program at home.

http://www.funduc.com/dupfiles.htm

Try this. I am unsure about network searching, but I use this program at home.

http://www.funduc.com/dupfiles.htm

I use coolfind. It can do much more than any file utility that is included in windows. It is shareware (free) and can be downloaded from

http://www.simtel.net/pub/pd/55424.html

It works extremely well on networks.

How many, many drives? Without auditing turned on, this is like calling up everyone in the phonebook and asking them if they read a classified ad in the local paper. You won't know unless you check everything.

The only solution is with a duplicate file finder that uses the file CRC, but if a person is smart, they add just one charcter and the file is no longer the same.

Hi,

You're actually asking two separate, but related, questions above: one about searching, the other about audit trails.

The first can be addressed by using a proper search tool that incorporates duplicate file finding (I personally use The Sleuthhound Pro, which is also great for looking for specific contents inside various known and unknown file types). The second is more complex, since that would involve log analysis. There is no simple way of knowing who copied what without proper logging set up from the start, at the user level as well as at the file system level. You don't mention what server platform you're using, but a properly configured syslog daemon would do the trick quite nicely.

Good luck!

Regards,

Marc Couture

Check Turbo Searcher at http://www.knownsoft.com, a fast file search utility, search any files instantly include your network computer.
Lee

To find and remove true duplicate files, use NoClone. It features true byte-by-byte comparison, not CRC, thus utmost safe.

http://noclone.net/