Re: how to track the users...in the domain
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Sun, 29 Jul 2007 07:27:50 -0700
You might want to look into auditing.
Auditing is discussed in multiple MS planning/deployment guides,
as well as in the Windows built-in help system.
You may audit many things, including
1. login and logout success and/or failure, at both the domain
controller level and at the non-DC sharing server level if
that is different from the DCs of the domain
2. NTFS filesystem actions, including only successful delete
After auditing is set up (you need to specify what should cause
an audit record in the security event log) there will be a record.
For action before auditing is defined, there is none.
Roger
"jerry" <jerry@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:67C654F4-81A9-4DCE-9A43-D77E1C5B49B0@xxxxxxxxxxxxxxxx
I' m using windows 2000 server as our domain contoller. there are shared
folders with full permissions read/write as it is used for our
applications. this shared folders is mapped to all users as various
drives.
recently one of the user deleted a file from this folder. i checked the
event
viewer of the server but couldnot find the users.
is there any way to get a report or track the users as they logon into
the
domain by the administrator .
.
- Follow-Ups:
- Re: how to track the users...in the domain
- From: Benny Van
- Re: how to track the users...in the domain
- Prev by Date: Re: cracking kerberos password
- Next by Date: Re: Administrator can't get file ownership or change file permissions
- Previous by thread: Re: cracking kerberos password
- Next by thread: Re: how to track the users...in the domain
- Index(es):
Relevant Pages
|
|