Re: Audit Sharing Folder

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/20/04

  • Next message: Roger Abell: "Re: File Permissions" 
    Date: Tue, 20 Jul 2004 00:26:56 -0700

    If the accesses are not showing in the security log
    of that server, then you need to adjust your auditing
    policies for that machine to enable auditing of
    object access. 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Rivai" <rivai@sejarahtni.mil.id> wrote in message
news:OMil96gbEHA.404@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> I have sharing folder in w2k3, name is \\w2k3\public
> i set auditing for all activity user who work that folder
> where i can log user activity with that folder
>
>
> Regards,
> Rivai
>
>
  • Next message: Roger Abell: "Re: File Permissions"

    Relevant Pages

    • Re: Cannot see audit events in security log
      ... I tried turning auditing off and on again after converting to NTFS in ... > If you enabled auditing of object access then you should see events in the ... > the size of the security log quite a bit and clear the log first. ... >> trying to establish auditing on a folder and its contents. ...
      (microsoft.public.win2000.security)
    • Re: Auditing file changes
      ... You might want to have them check who is the owner of the file. ... object access in Local Security Policy on the computer and enable auditing ... on the folder or file they need to track. ... security log size will need to be increased substantially to probably at ...
      (microsoft.public.win2000.security)
    • Re: File auditing not working properly
      ... Try auditing only a specific folder first so that you can see how it works ... etc. Make sure your security log is large enough to keep the ... Event Type: Success Audit ...
      (microsoft.public.win2000.security)
    • Re: Auditing Object Access
      ... If the users have a domain user account, which i assume, because they use RDP to connect to the server, then open the folder properties where the data is stored, go to Security Tab and enable auditing on the folder, choose the user accounts or better create a group, move all user accounts to the group and add the group for auditing. ... using a DC for normal user logons as a Terminal server is a really bad decision from the point of security. ... I redirect the output of the xcopy commands to a text file. ...
      (microsoft.public.windows.server.general)
    • Re: Cannot see audit events in security log
      ... If you enabled auditing of object access then you should see events in the ... the size of the security log quite a bit and clear the log first. ... > trying to establish auditing on a folder and its contents. ...
      (microsoft.public.win2000.security)