Event Log - Controling critical files and folders.

From: Alex Ribot (itpg124_at_gencat.net)
Date: 11/03/04

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #213" 
    Date: 3 Nov 2004 13:05:44 -0000
To: focus-ms@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    We are really interested to control the access to files and folders of our Domain Controlers (which are file servers too).
    We've checked all the auditing entries for authenticated users for all de data folders.
    The thing is when we make some actions (Read, write, create, delete, ...) to any file in data folders strange behavior occurs: There are some events that doesn't appear in Event Viewer. Especially when we Delete a folder or a file it's difficult to find a 564 event.
    Do you know if it's possible that in certain circumstances all the events that should be registered doesn't do?
    Why when we write to a critical file we sometimes get a 560 event and sometimes not?
    We don't think to be a problem of performance because de CPU average is 30-40%.
    Any other reason?

    Thanks.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Marc Fossi: "SecurityFocus Microsoft Newsletter #213"

    Relevant Pages

    • Re: Using a Group Policy in an XP Workgroup
      ... >>I have a small office network all on XP Pro and all in the same Workgroup. ... >> on the file servers by allowing certain groups and not others. ... >> whomever is logged on to the PC will have access to the folders. ... > Sounds like you are asking how to put permissions on files and shares. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: why shouldyou not rely on public folders??
      ... >I always here that it is better to put documents on file servers vs. public ... Using public folders as a file server can increase accessibility to ... inevitably get a performance hit from your server as you load it up. ... SharePoint then FileWay is a good application. ...
      (microsoft.public.exchange.admin)
    • Re: SMS Query - size of "My Documents" folder
      ... the total size of all the workstations' "My Documents" folders in a ... solution because we might not have enough disk space on our file servers ... advertisement that runs this vbscript on every workstation. ...
      (microsoft.public.sms.misc)
    • why shouldyou not rely on public folders??
      ... I always here that it is better to put documents on file servers vs. public ... folders but I can not seem to track down why? ... security, performance, ... Prev by Date: ...
      (microsoft.public.exchange.admin)