Auditing ACL Changes

From: Rob Galatidis (rob@dvdata.com.au)
Date: 07/30/02 

From: "Rob Galatidis" <rob@dvdata.com.au>
To: <focus-ms@securityfocus.com>
Date: Tue, 30 Jul 2002 09:51:44 +1000

Hi,
 
Does anyone know of a tool that will allow me to monitor who is changing
ACL’s on an NTFS filesystem?  (NT4/Win2K).  I have Auditing turned on,
but the events raised in the security event log are a little obscure and
don’t hold a lot of information.
 
Regards,
Rob
 
 

Relevant Pages

  • RE: User logs
    ... Hi Bill, you can use the security event log on a domain controller to see ... track access. ... information to produce reports or really monitor in any detail. ...
    (microsoft.public.windows.server.networking)
  • Re: Auditing ACL Changes
    ... On 30 Jul 02, at 9:51, Rob Galatidis wrote: ... > Does anyone know of a tool that will allow me to monitor who is changing ... > the events raised in the security event log are a little obscure and don t ...
    (Focus-Microsoft)