Re: Log anonymous share access
From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/13/05
- Next message: Steven L Umbach: "Re: Active Directory User Groups"
- Previous message: mwcanton: "Active Directory User Groups"
- In reply to: nicolasfr_at_gmail.com: "Re: Log anonymous share access"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 13 Jul 2005 11:44:05 -0500
You can audit who connects to a computer and who accesses a folder/file by
enabling auditing of logon events and then enabling auditing of object
access which would then allow you to audit access to folder/file
permissions. You could correlate the object access events to logon events in
the security log to get an idea what user is accessing from what computer.
The security log for logon events may not record IP address but it at least
will record computer name. As long as the computer is on your network the
name should allow you to find the IP by using the ping command or looking in
the wins/dhcp/dns records.
To reliably find IP address you may want to install a software firewall like
Sygate on the computer even if you disable the firewall ability to use it
for its extensive logging. The links below may help. --- Steve
http://support.microsoft.com/default.aspx?scid=KB;en-us;q248260
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://www.microsoft.com/technet/security/topics/auditingandmonitoring/securitymonitoring/default.mspx
http://www.microsoft.com/technet/security/prodtech/windows2000/secwin2k/default.mspx
--- chapter nine.
http://www.snapfiles.com/Freeware/security/fwfirewall.html --- software
firewalls including Sygate
<nicolasfr@gmail.com> wrote in message
news:1121245807.557191.148530@g14g2000cwa.googlegroups.com...
> All I want to do is logging user's IP who connect anonymously to a
> share... I thought it should be a simple task to do, but after one hour
> of googleing, I still cannot find a way to do it...
>
- Next message: Steven L Umbach: "Re: Active Directory User Groups"
- Previous message: mwcanton: "Active Directory User Groups"
- In reply to: nicolasfr_at_gmail.com: "Re: Log anonymous share access"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
