File System control is in the Registry:
HKLM\SYSTEM\CurrentControlSet\Control\FileSystem

This particular value is:
HKLM\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUp
date
REG_DWORD

You can also use FSutil to make this change and many of the NTFS and FAT
FileSystem tasks.

______________________________________
Dave Kleiman, CISSP, CISM, CIFI, MCSE
www.SecurityBreachResponse.com

-----Original Message-----
From: George M. Garner Jr. [mailto:gmgarner (at) erols (dot) com [email concealed]]
Sent: Friday, November 19, 2004 11:46
To: 'dave kleiman'
Subject: RE: mactimes - not reliable.

Dave,

> And remember access times can be "almost" completely shutoff on NTFS
> in
> NT4 and up.<

Can you provide some further documentation on how to do this?

Regards,

George.

-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

[ reply ]