Re: Auditing ACL Changes

From: Frank Heyne (fh@rcs.urz.tu-dresden.de)
Date: 07/31/02

Previous message: Michael van Zwieten: "RE: Good software against spam"
In reply to: Rob Galatidis: "Auditing ACL Changes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "Frank Heyne" <fh@rcs.urz.tu-dresden.de>
To: "Rob Galatidis" <rob@dvdata.com.au>, focus-ms@securityfocus.com
Date: Wed, 31 Jul 2002 07:38:30 +0200

On 30 Jul 02, at 9:51, Rob Galatidis wrote:

> Hi,
>
> Does anyone know of a tool that will allow me to monitor who is changing
> ACL s on an NTFS filesystem? (NT4/Win2K). I have Auditing turned on, but
> the events raised in the security event log are a little obscure and don t
> hold a lot of information.

See
http://www.heysoft.de/nt/eventlog/faqa1.htm#A35

Greetings

Frank Heyne

Previous message: Michael van Zwieten: "RE: Good software against spam"
In reply to: Rob Galatidis: "Auditing ACL Changes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

RE: User logs
... Hi Bill, you can use the security event log on a domain controller to see ... track access. ... information to produce reports or really monitor in any detail. ...
(microsoft.public.windows.server.networking)
Auditing ACL Changes
... Does anyone know of a tool that will allow me to monitor who is changing ... ACL’s on an NTFS filesystem? ... (NT4/Win2K). ... but the events raised in the security event log are a little obscure and ...
(Focus-Microsoft)