File Access Auditing on Exchange 2003 Server
From: Jimmy (Jimmy_at_discussions.microsoft.com)
Date: 06/28/05
- Next message: Darren: "Win2k3 SP1- Removing Ctrl+Alt Del"
- Previous message: TC: "How use of security tools."
- Next in thread: Steven L Umbach: "Re: File Access Auditing on Exchange 2003 Server"
- Reply: Steven L Umbach: "Re: File Access Auditing on Exchange 2003 Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 28 Jun 2005 04:01:04 -0700
Our company has an Exchange 2003 SP1 server runs on Windows 2003 Std. It will
update to SP1 in a few weeks. The server also does file sharing for all our
40+ users.
We want to enable auditing to keep track of read/write activities on the
file shares. I did attempt turn on Success/Failure of Object Access in Local
Security Policy. I didn't turn on auditing on any File System yet. Then I
discovered a lot of Exchange object access (ID 562) were tracked in security
log. Size increase is more than 6MB for merely an hour. That makes auditing
impractical to implement.
Did I do anything wrong on the setup or this is a necessary evil of auditing
on E2K3?
Jimmy
- Next message: Darren: "Win2k3 SP1- Removing Ctrl+Alt Del"
- Previous message: TC: "How use of security tools."
- Next in thread: Steven L Umbach: "Re: File Access Auditing on Exchange 2003 Server"
- Reply: Steven L Umbach: "Re: File Access Auditing on Exchange 2003 Server"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
