Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!wuarchive!sdd.hp.com!hp-pcd!hplsla!davidr
From: davidr@hplsla.HP.COM (David M. Reed)
Newsgroups: comp.lang.pascal
Subject: Re: Logging activity on PC via TSR
Message-ID: <6490012@hplsla.HP.COM>
Date: 3 May 91 01:10:06 GMT
References: <26540@adm.brl.mil>
Organization: HP Lake Stevens, WA
Lines: 13

I have a Public Domain program from PC Magazine that performs this logging.  
I use it to keep track of activities on a shared system.  It's one flaw is 
that it does not catch the COMMAND.COM _internal_ commands (eg. COPY, DEL, 
MKDIR, RMDIR, etc.).  As I particularly wanted to know when someone was 
deleting a file I determined to make the internal commands less easily 
accessible.  The preferred was is to use a binary editor and locate each 
internal command and rename it, and the provide comparable external commands 
(such as is available with the MKS Toolkit).  However I chose to simply use 
a feature of the Public Domain program NDOSEDIT, a 3K TSR command recall/edit 
program (using the arrow keys), which can have aliases defined.  These 
aliases map the internal commands to the external versions I have, which 
subsequently get logged to a file.  While it is not perfect, it is simple 
and reliable enough for my purposes.