Stop auditing please

From: Computer Bliss (ilovejunkmail@spam.com)
Date: 08/21/02 

From: "Computer Bliss" <ilovejunkmail@spam.com>
Date: Wed, 21 Aug 2002 14:40:13 -0500

We had a security issue a few weeks back and I enabled audits on the network
drive. I was auditing logon/logoff and all file or folder deletions. This
move quickly filled the security logs with entries a rate of about 10-20 or
more entries per minute (we have only 5 users right now). The security
entries were mostly a bunch of unreadable hexadecimal and other cryptic
messages. Since hexadecimal security codes mean nothing to me, I decided to
remove all auditing on the drive... After all, who cares if I can get all
that data if I cannot make sense out of it anyway? (take a hint Microsoft)

The problem is that some form of auditing still seems to be engaged even
though I removed the auditing in the security tabs and applied the changes
to the entire drive (about 10,000 files or so).

How do I shut this confounded auditing off? What is the trick?

Thanks for the help
Computer Bliss

Relevant Pages

  • Re: audit user activity
    ... you can set filter to view the Security log for a particular user. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Right-click Small Business Server Auditing Policy and click Edit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Pen-testing Internships?
    ... I know that Wells Fargo has a program for IT auditing where they go to ... > very good resource for learning and collaboration among IT Security ... Cenzic has the most comprehensive solutions to meet your application security penetration testing and vulnerability management needs. ... You have an option to go with a managed service or an enterprise software. ...
    (Pen-Test)
  • RE: Sharing Folder and Files
    ... you need to enable Local Security Auditing and then auditing on your ... The audited entries can be viewed under Event Viewer --> Security. ... --> Enable auditing on your folders. ...
    (microsoft.public.win2000.file_system)
  • Re: Audit Failures/READ_CONTROL SYNCHRONIZE
    ... am I trying to use auditing for something it was not ... >: If you're using Windows 2000 then you're going to see a lot of yucky events>: like this. ... Access failures often occur normally, Explorer in particular>: often tries to open files with maximum privilege,>: and then use the failure as a UI cue- it will display the file differently. ... >: For instance, if you don't have Full Control on a file, Explorer will notice>: and disable parts of the security dialog. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: How to trace a deleted file on a server by a user
    ... If you didn't have security auditing enabled, ... want to audit every single file operation. ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.win2000.termserv.apps)