We have a issue with an employee where we need to find if the invoice he was
supposed to create last year was only recenlty created and claim it was
created in 2008. Does SBS keep record of when the file was created on the
shared folder regardless of the client comptuer time? Unfortunately we don't
have last years backup to compare.

Is there any way to find if a file was created recently just by changing the
client comptuer date back to last year where the file is on SBS shared
network folder. When you change the computer date to 11/11/2008 and create a
file then file creation date is 11/11/2008, and once you change the compter
date back to recent time, the file creation date is still 11/11/2008.

James <James@newsgroup> wrote:

> We have a issue with an employee where we need to find if the invoice
> he was supposed to create last year was only recenlty created and
> claim it was created in 2008. Does SBS keep record of when the file
> was created on the shared folder regardless of the client comptuer
> time? Unfortunately we don't have last years backup to compare.
>
> Is there any way to find if a file was created recently just by
> changing the client comptuer date back to last year where the file is
> on SBS shared network folder. When you change the computer date to
> 11/11/2008 and create a file then file creation date is 11/11/2008,
> and once you change the compter date back to recent time, the file
> creation date is still 11/11/2008.

James <James@newsgroup> wrote:

> We have a issue with an employee where we need to find if the invoice
> he was supposed to create last year was only recenlty created and
> claim it was created in 2008. Does SBS keep record of when the file
> was created on the shared folder regardless of the client comptuer
> time? Unfortunately we don't have last years backup to compare.
>
> Is there any way to find if a file was created recently just by
> changing the client comptuer date back to last year where the file is
> on SBS shared network folder. When you change the computer date to
> 11/11/2008 and create a file then file creation date is 11/11/2008,
> and once you change the compter date back to recent time, the file
> creation date is still 11/11/2008.

The file creation date is determined by the date on the server, not the
workstation...

You should be able to test this out very easily yourself, re the desktop
clock. Of course, more than a 5-min time skew will cause you login problems,
so I wouldn't count on it working at all. And a user wouldn't have local
admin rights or be able to reset the clock anyway, right? <cough>

"James" <James@newsgroup> wrote in message
news:4B3BC363-550D-4464-A7BA-1AF9D8430B8D@newsgroup

> We have a issue with an employee where we need to find if the invoice he
> was
> supposed to create last year was only recenlty created and claim it was
> created in 2008. Does SBS keep record of when the file was created on the
> shared folder regardless of the client comptuer time? Unfortunately we
> don't
> have last years backup to compare.
>
> Is there any way to find if a file was created recently just by changing
> the
> client comptuer date back to last year where the file is on SBS shared
> network folder. When you change the computer date to 11/11/2008 and create
> a
> file then file creation date is 11/11/2008, and once you change the
> compter
> date back to recent time, the file creation date is still 11/11/2008.

If you right-click on the filename, you can see when it was created and when
it was modified. But if the user is smart enough to figure out what you've
described, AND the user has the ability to change the time, e.g. the user is
a local admin, then yes, the user can do that.

Does the user have local admin rights on the machine? If so, curious why?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

"Lanwench [MVP - Exchange]"
<lanwench@newsgroup> wrote in message
news:OoVTBwpYKHA.5852@newsgroup

> James <James@newsgroup> wrote:

>> We have a issue with an employee where we need to find if the invoice
>> he was supposed to create last year was only recenlty created and
>> claim it was created in 2008. Does SBS keep record of when the file
>> was created on the shared folder regardless of the client comptuer
>> time? Unfortunately we don't have last years backup to compare.
>>
>> Is there any way to find if a file was created recently just by
>> changing the client comptuer date back to last year where the file is
>> on SBS shared network folder. When you change the computer date to
>> 11/11/2008 and create a file then file creation date is 11/11/2008,
>> and once you change the compter date back to recent time, the file
>> creation date is still 11/11/2008.

>
> The file creation date is determined by the date on the server, not the
> workstation...
>
> You should be able to test this out very easily yourself, re the desktop
> clock. Of course, more than a 5-min time skew will cause you login
> problems, so I wouldn't count on it working at all. And a user wouldn't
> have local admin rights or be able to reset the clock anyway, right?
> <cough>
>

Good point about the server creating the time stamp, since the item is being
created on the server side.

Ace

Ace Fekay [MCT] <aceman@newsgroup> wrote:

> "Lanwench [MVP - Exchange]"
> <lanwench@newsgroup> wrote in
> message news:OoVTBwpYKHA.5852@newsgroup

>> James <James@newsgroup> wrote:

>>> We have a issue with an employee where we need to find if the
>>> invoice he was supposed to create last year was only recenlty
>>> created and claim it was created in 2008. Does SBS keep record of
>>> when the file was created on the shared folder regardless of the
>>> client comptuer time? Unfortunately we don't have last years backup
>>> to compare. Is there any way to find if a file was created recently just
>>> by
>>> changing the client comptuer date back to last year where the file
>>> is on SBS shared network folder. When you change the computer date
>>> to 11/11/2008 and create a file then file creation date is
>>> 11/11/2008, and once you change the compter date back to recent
>>> time, the file creation date is still 11/11/2008.

>>
>> The file creation date is determined by the date on the server, not
>> the workstation...
>>
>> You should be able to test this out very easily yourself, re the
>> desktop clock. Of course, more than a 5-min time skew will cause you
>> login problems, so I wouldn't count on it working at all. And a user
>> wouldn't have local admin rights or be able to reset the clock
>> anyway, right? <cough>
>>

>
>
> Good point about the server creating the time stamp, since the item
> is being created on the server side.

I'm both brilliant *and* beautiful. Some might find it a burden, but not me,
because I'm also incredibly vain.

>
> Ace

"Lanwench [MVP - Exchange]"
<lanwench@newsgroup> wrote in message
news:eYp5X6yYKHA.1652@newsgroup

> Ace Fekay [MCT] <aceman@newsgroup> wrote:

>> "Lanwench [MVP - Exchange]"
>> <lanwench@newsgroup> wrote in
>> message news:OoVTBwpYKHA.5852@newsgroup

>>> James <James@newsgroup> wrote:
>>>> We have a issue with an employee where we need to find if the
>>>> invoice he was supposed to create last year was only recenlty
>>>> created and claim it was created in 2008. Does SBS keep record of
>>>> when the file was created on the shared folder regardless of the
>>>> client comptuer time? Unfortunately we don't have last years backup
>>>> to compare. Is there any way to find if a file was created recently
>>>> just by
>>>> changing the client comptuer date back to last year where the file
>>>> is on SBS shared network folder. When you change the computer date
>>>> to 11/11/2008 and create a file then file creation date is
>>>> 11/11/2008, and once you change the compter date back to recent
>>>> time, the file creation date is still 11/11/2008.
>>>
>>> The file creation date is determined by the date on the server, not
>>> the workstation...
>>>
>>> You should be able to test this out very easily yourself, re the
>>> desktop clock. Of course, more than a 5-min time skew will cause you
>>> login problems, so I wouldn't count on it working at all. And a user
>>> wouldn't have local admin rights or be able to reset the clock
>>> anyway, right? <cough>
>>>

>>
>>
>> Good point about the server creating the time stamp, since the item
>> is being created on the server side.

>
> I'm both brilliant *and* beautiful. Some might find it a burden, but not
> me, because I'm also incredibly vain.
>

Carly Simon? :-)

I have never doubted you nor have any complaints! :-D