Re: Looking for the softwares to monitor our file server

If you enable object access auditing and set the auditing on the folders you need to audit you can use event viewer to audit these events.
Here is a link on setting it up under Windows 2000 (basically the same thing as 2003 ).
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/13w2kadc.mspx

---------------------------------------------------------------------------
Terry Lowery - tlowery@xxxxxxxxxxxxxxxx
Systems Engineer - Swift Systems, Inc.
Your True Technology Partner
www.SwiftSystems.com
Toll Free : 877-Swift-Si
Local : 301-682-5100
Fax : 301-682-5082

- Hosting and Collocation
- Broadband Internet Access for Business
- Network Engineering and Support Services
--------------------------------------------------------------------------



Truong duc Luong wrote:
Hi all,
I'm a network manager at smal-size company. We've one file server
using Windows 2003 server. I'm only using Event Viewer to log all
operation with the file server. Recently, some important data in the
file server have been deleted. So, I can't detect when does this
operation occurs? And Who do this?
To improve the logging capability, i googled and found this software:
Alfa File Monitor (http://www.alfasp.com/products.html). It meets with
our requirement, but very expensive (1.999 EUR).
Do you know any software like Alfa File Monitor (with less price) ?
The software can answer quetions:
- Who does delete, modify the file server?
- When does this occurs?

Many thanks,


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: Users cant use Office 2003 on my W2K TS .... !!!
    ... OOpps ... ... I was looking at the event viewer on the file server, ... DOH! ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Looking for the softwares to monitor our file server
    ... You can do this with the Event Viewer. ... Looking for the softwares to monitor our file server ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: Event Viewer Doesnt Display
    ... I have w2k as file server. ... Since 2 days ago I cannot get access to event viewer, ... anything for that matter in administrative tools ... Steve Parry BAMCP ...
    (microsoft.public.win2000.general)
  • Re: Monitor File Access
    ... changed or deleted on the file server. ... Business Server 2003. ... Do a search on Audit NTFS ... log when auditing file/folder access. ...
    (microsoft.public.windows.server.security)
  • Event Viewer System Properties Administrative Tools Doesnt Work
    ... I have w2k as file server. ... Since 2 days ago I cannot get access to event viewer, ... anything for that matter in administrative tools ...
    (microsoft.public.win2000.general)