How to check the creator of a file in Windows?

39,039

Typically the 'owner' is the creator, but since the user is part of the administrators group all admins are given owner rights to it (this way when an admin leaves an organization there aren't files orphaned on a file-system that no one but root can delete etc). This isn't so much a problem with windows itself, so much as NTFS - and additional creator field would be nice. If you need to do a more forensic analysis, proprietary data formats (office: .doc(x), .xls(x) etc) typically have some metadata in them about who created them. To this end its worth noting that the office 2007+ formats are simply zipped xml files and directories (change the file extension to .zip or ...openwith your gunzip program of choice)

Share:
39,039

Related videos on Youtube

thoughtcriminal
Author by

thoughtcriminal

Updated on September 17, 2022

Comments