Re: Logging attempted access over a networked connection

First, you have to enable auditing of object access in local security policy
(or domain/ou policy if you have AD), then on the object i.e. your shared
folder.
Then you will be able to see access events in Event log.

Regards

"CurlySafrican" <CurlySafrican@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:9AF9EA24-4231-4FA0-A5A6-97E8C1D8F04C@xxxxxxxxxxxxxxxx
I have two systems sharing files. Both systems are running windows 2000
professional.
System A is sharing a folder and everyone has full control to that share
at
share - and file level.
Using system B, I can access system A with normal user action, but I have
an
App trying to read from that same location on System A, which is getting
Access Denied Messages.
The App's logging is poor and I am trying to see which account is being
used
by the App on System B in trying to access the share over the network on
system A.
Is there anything that I can do on System A that will let me see who/what
is
trying to access the share?
I have auditing enabled on the share and the security event logs are not
showing anything at all for the times at which the App on system B is
trying
to access the share on System A.

Any help would be greatly appreciated.


.

Relevant Pages

  • Re: Possible to track users file system usage?
    ... You can enable auditing of object access on his computer and then audit ... write permission on directories on his computer that he has write access to ... environment where employees are appreciated and treated fairly along with ...
    (microsoft.public.security)
  • Re: Terminal Service Log File?
    ... You can turn on Auditing through the Local Security Policy: ... Enable Auditing (both Success and Failures) for the events you'd like to ... > How can I get a log file of any attempts to log on to ...
    (microsoft.public.win2000.general)
  • Re: Terminal Service Log File?
    ... You can turn on Auditing through the Local Security Policy: ... Enable Auditing (both Success and Failures) for the events you'd like to ... > How can I get a log file of any attempts to log on to ...
    (microsoft.public.win2000.networking)
  • Re: unable to perform "perfmon" on a remote Windows XP Pro
    ... object access and privilege use for failure only and logon events for ... success and failure on that computer in Local Security Policy to see if ... As far as the user rights in Local Security Policy, ... > domain admins group than an XP which is not having the problem. ...
    (microsoft.public.win2000.security)
  • Re: Login Tracking
    ... You can turn on Auditing through the Local Security Policy: ... Enable Auditing (both Success and Failures) for the events you'd like to ... Please do not send e-mail directly to this alias. ...
    (microsoft.public.win2000.advanced_server)
Quantcast