Re: audit deletions in shared folders



You need to set auditing (for delete only) on the underlying NTFS storage.
http://search.microsoft.com/results.aspx?mkt=en-US&setlang=en-US&q=ntfs+audit

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"kdbwtg" <kdbwtg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:10CAFE8F-221C-47CF-814D-A19DA41DD494@xxxxxxxxxxxxxxxx
I need to know how to turn on and configure auditing so that I am only
monitoring the deletions of items in shared folders on the servers. Can
anyone help?

Thanks.


.



Relevant Pages

  • RE: What server hardening are you doing these days?
    ... Visual Developer - Security: ... > Windows Server 2003 Security Guide: ... > Scenarios and Procedures for Microsoft Systems Management Server 2003: ... >> Because of these changes to the core operating system of Windows XP ...
    (Focus-Microsoft)
  • Re: RWW Security was compromised.
    ... Windows server security as my previous experience is Unix. ... > One of our clients RWW was compromised over the weekend. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW Restrictions
    ... Windows server security as my previous experience is Unix. ... Am I crazy to be so concerned about the administrator account being ...
    (microsoft.public.windows.server.sbs)
  • [NT] Vulnerabilities in Pragmatic General Multicast (PGM) Allows Denial of Service (MS08-036)
    ... Get your security news from a reliable source. ... the Pragmatic General Multicast (PGM) protocol that could allow a denial ... Note that the denial of service vulnerability would not ... Windows XP and Windows Server 2003 and rated Moderate for all supported ...
    (Securiteam)
  • Re: adding a new domain and removeing the old one?
    ... Setup trusts (if an external trust is configured and sidhistory is used, ... Install and configure migration tooling ... Translate security of the data/resources from source security ... Windows NT Server 4.0, Windows 2000, or Windows Server 2003 to a computer ...
    (microsoft.public.windows.server.active_directory)