Organizations should track the general use of files and folders, especially with the timestamping information that's invariably included. This is also somewhat of a security requirement and monitoring in this fashion is required in some industries. Organizations should keep track of changes that occur to key files and folders, looking for anything out of the ordinary or suspicious. When the use of high-level privileges and accounts is required, many organizations monitor such files and related changes carefully.

See Microsoft's security identifiers document for more details. IT can use programs such as TrustedInstaller to handle these sensitive files carefully. The leading reasons for monitoring include the following:Ĭertain parts of the file system - especially those related to account data, OS permissions and controls - should never be 'touched' by IT except for on rare occasions.

There are many good reasons to monitor the Windows file system on modern PCs. IT administrators who seek a positive UX for Windows desktop users should monitor some if not all of the Windows files and folders.

Watch folder program