Re: Security Groups ... Where

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/10/05 

Date: Thu, 9 Jun 2005 17:10:23 -0500

You could enable auditing of first object access on the computers where the
folders are located and then enable auditing of the folders for those
security groups for the bare minimum permissions that you need to audit and
then object access events will be generated in the security logs of the
computers - lots and lots of them. Note that the securuity group itself will
not be recorded in an object access event but the user that belongs to the
groups name will be recorded. Auditing of object access is not user friendly
but the info you need will usually be there if you dig deep enough. If you
decide to try such be sure to increase the size of the security logs
substantially and the use of the free Event Comb tool from Microsoft may
help in searhing the security logs. It also allows searches by text strings.
The links below may help. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/50fdb7bc-7dae-4dcd-8591-382aeff2ea79.mspx
http://www.comptechdoc.org/os/windows/win2k/win2kauditing.html

"Jan K. van Dalen" <vandjATmarkross.com> wrote in message
news:uJHdfTGbFHA.1404@TK2MSFTNGP09.phx.gbl...
> Hi Everyone,
>
> Is there any way I can know where a specific security group is being used?
>
> IOW, if it is used in 7 different directories, 9 files and 3 public
> folders that I would get a list with such info.
>
> Thanks.
>

Relevant Pages

  • Re: Moved & Deleted Files
    ... share will not go to the recycle bin on the server. ... For Windows 2000 you can enable auditing of object access in the Local ... Security Policy or Domain Controller Security Policy for domain controllers ... and then audit folders for user access. ...
    (microsoft.public.security)
  • printing security
    ... Different staff and groups of staff have different needs, ... additional layers of child folders, again with various security settings. ... security groups. ...
    (microsoft.public.windows.server.security)
  • Re: printing security
    ... additional layers of child folders, again with various security settings. ... instead of security groups. ...
    (microsoft.public.windows.server.security)
  • Re: File Access Auditing on Exchange 2003 Server
    ... Auditing of object access can make a huge amount of entries in the security ... log even when you have not enabled auditing on any folders yet. ...
    (microsoft.public.windows.server.security)
  • Re: MACHINE ACCOUNT filtering of group policy
    ... startup script cannot expect a desktop with which to ... Security) ... > Create 2 Security Groups NO-RUN-GP COMPUTERS, ... >>> but when I tried using a similar procedure with machine accounts, ...
    (microsoft.public.windows.group_policy)
Loading