Fileserver EventReader

Analysis of file server resources
Determine responsible persons (Data Owner) or unknown accesses (eg machines / service accounts)

File server migrations are actually not as complicated as they are often feared! However, thorough preparation and accurate planning are essential. This includes the preparation of the shares (sizes, dates, identification of orphan directories ...), the review of the current authorization situation and structural adjustments.

Two major migration issues are addressed with the file server EventReader:

  1. Can you be sure that systems (production systems, applications, service accounts) will not access the file server, which would go nowhere after the restructuring?
  2. Who are actually the data owners of the individual directories: The people who access the most know, in any case, with whom you have to negotiate about the structures.

The EventReader evaluates the Windows events
and provides the filtered information
to use a resource as an Excel file.

extracted information

Auditing policies that generate Windows Events are enabled on the unknown share.

These include:

  • Who: Account
  • From Where: Hostname
  • When time
  • To what: directory (optional: file)


Auditing is activated for the shares to be evaluated. These are left to run for a desired period of time and after 4-8 weeks, the events are retrieved using the EventReader from aikux.

More details on how it works can be found here here…

Why not with Powershell

The evaluation of the events takes only a few minutes with the EventReader, even for large environments. With Powershell such evaluation can not be realized for performance reasons. Filtering events is extremely ineffective with Powershell and would take days. This was also the reason for the development of the tool.

Use EventReader

If you want to use the EventReader, please contact us via the form on the left. The EventReader can be used from Windows Server 2008 upwards as well as for EMC file server.