Re: Logging Permissions changes
From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 06/06/04
- Previous message: Steven L Umbach: "Re: Removing domain policy"
- In reply to: Niv: "Logging Permissions changes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 06 Jun 2004 20:56:23 GMT
You would have to enable auditing of object access on that server and then
audit folders for just success of change permissions. I suggest you NOT
audit every folder on the computer but just those you need to track in order
to keep the amount of events down in the security log which can generate
very quickly. Also increase the size of the security log quite a bit to say
at least 10 mb. The links below may be helpful. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://www.microsoft.com/technet/security/guidance/secmod144.mspx
"Niv" <anonymous@discussions.microsoft.com> wrote in message
news:CBC7ECA9-3D9F-4374-B1A8-A65656258D18@microsoft.com...
> Is it possible to log permission changes on particular server.
> for example :log every change on file permissions made by the admin or
power user ?.
> if so,how do I set such a rule?
> Thanks in advance,
> Niv.
- Previous message: Steven L Umbach: "Re: Removing domain policy"
- In reply to: Niv: "Logging Permissions changes"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
