Auditing of exporting data to removable media

From: Dave (briced@saic.com)
Date: 09/24/02 

From: "Dave" <briced@saic.com>
Date: Tue, 24 Sep 2002 05:12:13 -0700

Hello,

Does W2K auditing have the capability to log to one of the
event logs the fact that a user has copied data from the
system to removable media such as a floppy disk? If so,
how is it set up? What is the event number?

Thanks

Relevant Pages

  • Too much auditing?
    ... an "auditing" question... ... propose to overwrite event logs as needed, ... account change, system events, process events, EVERYTHING. ... it's totally burried amoung all the junk!) ...
    (microsoft.public.win2000.security)
  • Re: Files and folder monitor
    ... before it shows up in the Event logs to use this nifty utility, ... to be enabled on the machine, whether thru Group Policy or a local policy to ... monitor files, folder and/or printer access. ... Enable and Apply Windows Security Auditing: ...
    (microsoft.public.windows.server.networking)
  • Re: Audit Object Access Problem
    ... You will normally get some events even if you do not have any auditing ... You might want to use the free tool dumpsec from SomarSoft to see ... security option on those computers in Local Security Policy to make sure ... > event logs fill up in a couple of minutes even if I set them to 100 ...
    (microsoft.public.win2000.security)
  • Re: Audit Inbox access
    ... peoples email but it's usually for Calendars. ... I have turned on auditing and ... monitor the event logs but is there a tool or third party application to ... You can try C2C's Exchange Security Risk Auditor ...
    (microsoft.public.exchange.admin)