Find out WHO made the last change to files by Powershell? Find out WHO made the last change to files by Powershell? powershell powershell

Find out WHO made the last change to files by Powershell?


The only user held against a file on NTFS is the owner. There is no record of who last modified the file.

However Windows can audit file system operations.

See http://support.microsoft.com/en-us/kb/310399 (says Windows XP in the title but applies to later versions). This needs to be applied to the system hosting the file system.