I need to find a way to determine what files on a shared folder are being accessed, and by whom. Commands like “Net Files” and “Net Session” can give this information, as well as PSFile.exe in SysInternals, but I cannot figure out how to do this programmatically. I have found a way to determine who is accessing a share via WMI, but it does not show what file is being accessed. Does anyone know how to do this in C / C++ / C#? Any and all help will be greatly appreciated.
Share
NetFileEnum level 3 seems to be what you’re looking for.