Identify word document

A

agostino

I need to identify if a word document it's edited with a copy of my society's
office 2003 (word 2003).
It's possible find a corrispondence between the document and the office
serial or something like that?

regard

Agostino
 
G

Gyorgy Moldova [MVP]

the best data to check for is the "creator" text and the "last saved" data,
which you can get from file - properties.
 
G

Guest

I not need to verify two documents from each other.
But if I have two PC with two office 2003 with different serial number.
When I create one document with one copy of office from one of that PC, how
I can identify the copy that it has generate the document?

Agostino
 
G

Gyorgy Moldova [MVP]

now that would raise a serious privacy issue
I not need to verify two documents from each other.
But if I have two PC with two office 2003 with different serial number.
When I create one document with one copy of office from one of that PC,
how I can identify the copy that it has generate the document?

Agostino
 
G

Guest

It's not a privacy problem.
An employee is suspected to have stolen industrial secret.
and now I must investigate on behalf of the court.

I can search some key word to identify the documents steal to you.
But if possible to identify the copy of office (company's office 2003) that
has created the documents it is better.
It's possible? how?

Agostino
 
M

Milly Staples [MVP - Outlook]

If this is a court case involving industrial espionage, you are probably
better off hiring a forensic investigator rather than mucking around in this
yourself. They will have the expertise to detect what you are looking for
without messing with the evidence so that it would be impossible to tell
what had been produced on what machine.

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. All
unsolicited mail sent to my personal account will be deleted without
reading.

After furious head scratching, [email protected] asked:

| I need to identify if a word document it's edited with a copy of my
| society's office 2003 (word 2003).
| It's possible find a corrispondence between the document and the
| office serial or something like that?
|
| regard
|
| Agostino
 
G

Guest

I cannot ask to an agency.
There is not the possibility to use forensic tools I cannot do a complety
copy of the HD
I'm the only person authorized from the court to search in the employeer
Home PC.

So it's possible or not?

thank you

Agostino


"Milly Staples [MVP - Outlook]"
 
G

Gary Smith

There is no way to do what you're asking with sufficient rigor to
constitute legal proof. Any data in or assocaitd with a document can be
altered. Even if you could find something in the document that tied it to
a particular machine, how could you prove that you had not altered it
yourself?

Specifically, Office programs do not record serial numbers in the
documents created using them.


I cannot ask to an agency.
There is not the possibility to use forensic tools I cannot do a complety
copy of the HD
I'm the only person authorized from the court to search in the employeer
Home PC.
So it's possible or not?
thank you


"Milly Staples [MVP - Outlook]"
If this is a court case involving industrial espionage, you are probably
better off hiring a forensic investigator rather than mucking around in
this
yourself. They will have the expertise to detect what you are looking for
without messing with the evidence so that it would be impossible to tell
what had been produced on what machine.

--?
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. All
unsolicited mail sent to my personal account will be deleted without
reading.

After furious head scratching, [email protected] asked:

| I need to identify if a word document it's edited with a copy of my
| society's office 2003 (word 2003).
| It's possible find a corrispondence between the document and the
| office serial or something like that?
|
| regard
|
| Agostino
 
B

Bob Buckland ?:-\)

Hi Agostino,

Once upon a time, MS Word documents did contain GUIDs, within the document, but that was changed in later versions. This document
may help you determine what is or isn't in a specific document.
http://support.microsoft.com/kb/825576/en-us?FR=1

========
I cannot ask to an agency.
There is not the possibility to use forensic tools I cannot do a complety
copy of the HD
I'm the only person authorized from the court to search in the employeer
Home PC.

So it's possible or not?

thank you

Agostino >>
 
G

Gyorgy Moldova [MVP]

no, I mean as Gary said, Office does not record any computer-specific
information. If it would, it would be a big privacy issue.
 
G

Guest

It's not exactly in fact time ago a macro virus's programmer whas
indentified by the office serial number that he use to write the document
that contained the macro-virus (office 95).

I prove that I not altered by myself because a legal delegate checks me
during every operations.



Gary Smith said:
There is no way to do what you're asking with sufficient rigor to
constitute legal proof. Any data in or assocaitd with a document can be
altered. Even if you could find something in the document that tied it to
a particular machine, how could you prove that you had not altered it
yourself?

Specifically, Office programs do not record serial numbers in the
documents created using them.


I cannot ask to an agency.
There is not the possibility to use forensic tools I cannot do a complety
copy of the HD
I'm the only person authorized from the court to search in the employeer
Home PC.
So it's possible or not?
thank you


"Milly Staples [MVP - Outlook]"
If this is a court case involving industrial espionage, you are
probably
better off hiring a forensic investigator rather than mucking around in
this
yourself. They will have the expertise to detect what you are looking
for
without messing with the evidence so that it would be impossible to
tell
what had been produced on what machine.

--?
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. All
unsolicited mail sent to my personal account will be deleted without
reading.

After furious head scratching, [email protected] asked:

| I need to identify if a word document it's edited with a copy of my
| society's office 2003 (word 2003).
| It's possible find a corrispondence between the document and the
| office serial or something like that?
|
| regard
|
| Agostino
 
G

Guest

Hi Bob,
ok word create metadata...
There is some code vba o some script to read all metadata includeded not
official data?

Agostino
 
A

Ada Pan [MSFT]

Hello Agostino,

I researched the default settings from Office and what I found is there is
no identifiable information for using Office/Word 2K3 in a workgroup/stand
alone environment.

There are many security features for ensuring this scenario doesn't play
out but it involves special configuration in a domain environment and this
does not appear to be the case for this scenario. Smart Tags can also be
used with revision history but it doesn't sound like you ever configured
any of this.

Regarding this situation, I would suggest you collect as much information
about the environment as possible, such as if you are on a domain, has any
security policies, smart tags enabled, etc ... If so, you can directly
contact to CSS for some additional work.

International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx

US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone

Hope this helps.

Regards,

Ada Pan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Top