Re: [Question] Audit Share

From: Steven L Umbach (n9rouz_at_nscomcast.net)
Date: 11/19/03 

Date: Wed, 19 Nov 2003 03:58:07 GMT

You can enable auditing of object access and then enable auditing of folders/files,
however a lot of events will be generated in the security log. It takes a while to
learn how to track down pertinent events. I suggest that you try a test share first
and then view the security log to see how it works. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://support.microsoft.com/default.aspx?scid=kb;en-us;300549

"Alan Tang" <alantang@netband.com.hk> wrote in message
news:epz3gRkrDHA.2304@TK2MSFTNGP12.phx.gbl...
> Hello:
>
> Is it possible to audit the Share. I want to audit which use have
> perform the Share the folder or remove the share!
>
> Thanks!
>

Relevant Pages

  • Re: Audit files
    ... Not only will it generate a large audit trail, ... areas are heavily used it will tend to bog down the I/O system. ... > fine tune what folders/files you are auditing and only audit the bare ... > Event Comb from Microsoft helpful in searching the security log for events ...
    (microsoft.public.windows.server.security)
  • Re: log file how to?
    ... You can enable auditing on your computers however for what you would want to do you ... would need to audit everything and then enable auditing on all folders on the ... events in the security log and use Event Comb to scan the logs of multiple computers. ...
    (microsoft.public.win2000.networking)
  • Re: Audit and applications execution
    ... You can enable auditing of object access and then set auditing of the executable ... of groups or users to audit instead of everyone to keep events generated down. ... want to substantially increase the size of the security log from default. ... > was used - opening and closing time. ...
    (microsoft.public.win2000.security)
  • Re: Audit account usage and folder access.
    ... If you only audit a few folders/files, ... > Would this take up a large amount of resources? ... >> You will need to first enable auditing of object access for the computer ...
    (microsoft.public.win2000.security)
  • Re: Activity monitoring in my pc
    ... You can enable auditing of object access and then audit specific ... folders/files, however that will only tell you who accessed a file since ...
    (microsoft.public.win2000.security)