Re: track who accessed/deleted a file/folder.

anonymous_at_discussions.microsoft.com
Date: 11/13/03


Date: Thu, 13 Nov 2003 11:07:29 -0800

Hi,
Unfortunately I have did all that, and also asked someone
to test it as well. It just doesn't work. Have anyone
of you tested this yet?
Thanks,
Min
>-----Original Message-----
>You can enable auditing of object access and then audit
specific files/folders for
>particular access levels by users/groups, but it does
generate a huge amount of
>entries so you may want to use it sparingly. It may help
to filter for certain for
>events such as 560 and 562. --- Steve
>
><anonymous@discussions.microsoft.com> wrote in message
>news:023c01c3a943$3808f540$a101280a@phx.gbl...
>> Does anyone know how to track who last accessed a file
or
>> folder? In Novell, once someone opened the file/folder,
>> there is a time and user ID stamped. If someone also
>> deletes a file, you can find out who deleted a file. I
>> have setup audit in win2k, but it is no use.
>> Thanks.
>> Min
>
>
>.
>



Relevant Pages

  • Re: Audit Object Access
    ... object access can generate a lot of entries because W2K will do auto ... security policy for the effective setting under security options for "audit ... > Object Server: Security ...
    (microsoft.public.win2000.security)
  • Re: Auditing object access fill security log with EventID 562 for Exchange
    ... with +190,000 entries. ... Matt Woodman wrote: ... I need to enable audit of object access in order to monitor users moving ...
    (microsoft.public.windows.server.sbs)
  • Re: track who accessed/deleted a file/folder.
    ... You can enable auditing of object access and then audit specific files/folders for ... but it does generate a huge amount of ... entries so you may want to use it sparingly. ... > have setup audit in win2k, ...
    (microsoft.public.win2000.security)
  • RE: Sharing Folder and Files
    ... The audited entries can be viewed under Event Viewer --> Security. ... need to look for the category "object access". ... You can also apply a filter to make the search easier. ...
    (microsoft.public.win2000.file_system)