Re: Bad folders

From: Buz [MSFT] (buzb_at_online.microsoft.com)
Date: 12/29/03 

Date: Mon, 29 Dec 2003 14:24:33 -0500

Auditing Folder Creation Access

325898 HOW TO: Set Up and Manage Operation-Based Auditing for Windows Server
http://support.microsoft.com/?id=325898

300549 HOW TO: Enable and Apply Security Auditing in Windows 2000
http://support.microsoft.com/?id=300549

Buz Brodin
MCSE NT4 / Win2K
Microsoft Enterprise Domain Support

Get Secure! - www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.

Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.

"Greg" <anonymous@discussions.microsoft.com> wrote in message
news:01da01c3c4c4$8646d910$a101280a@phx.gbl...
> Every few weeks we have about 40 to 50 folders that are
> created with bad security. The folders are allways created
> with the Administrator account not having any rights and
> another account that is s-1-5-21-165812223-634798333-
> 8547516-1001 without rights as well. Is there a way to
> find out who or what the account is?
> Thanks,
> Greg

Relevant Pages

  • Re: Finding the last person to open a file.
    ... Auditing, and configure the folder/file that you want to audit. ... How to enable and apply security auditing in Windows 2000 ... Audit Active Directory Objects in Windows Server 2003 ...
    (microsoft.public.windows.server.active_directory)
  • RE: Move inhibit
    ... > One possibility in mind that I was considering is having some sort of authentication or verification before a move operation is performed. ... is it possible to have some sort of audit trail to see who moved the folder? ... You configure Auditing via GPO. ... Microsoft MVP - Windows Server - Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Event Log - Can anyone explain ??
    ... Eric Fitzgerald ... Windows Auditing and Intrusion Detection ... and It mentioned that security auditing was turn off. ...
    (microsoft.public.win2000.security)
  • Re: Loggin file activty
    ... You can create auditing for files - but I do not suggest that you audit all files as this will create a lot of events in event viewer. ... Microsoft MVP: Windows Server ...
    (microsoft.public.windows.server.general)
  • Security Auditing
    ... Security Auditing within a webfolder. ... I went to my User Manager and turned on Auditing but it ...
    (microsoft.public.inetserver.iis.security)