Re: failed/successfull audit delete folder and delete file and folder
- From: "steef83" <steef83@xxxxxxxxx>
- Date: 15 Nov 2006 06:40:33 -0800
Brian schreef:
In article <1163596358.737545.192610@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
steef83@xxxxxxxxx says...
Hi,A couple of things to check...
I've made a failed/successfull auditing on a folder, because this one
is constantly deleted.
We don't know if it is by a user or trough network problems.
Yesterday the folder was deleted, but we can't find any event of who
deleted it.
When a folder is deleted is also the audit deleted? or did I do
something wrong in the auditing.
Should I audit on a higher level?? \\shared\ instead of \\shared\...
1) Did you enable success and failure auditing for object access (this
is required for delete tracking)
2) Did you enable both success and failure auditing for the delete
action
3) Did you apply the delete action audit to the Everyone group. If you
did not encompass everyone, the person performing the deletion may not
be audited.
Brian
1) That I don't know
2) Yes
3) Everyone who was defined in the acl including the everyone group.
.
- Follow-Ups:
- Re: failed/successfull audit delete folder and delete file and folder
- From: Brian Komar [MVP]
- Re: failed/successfull audit delete folder and delete file and folder
- References:
- failed/successfull audit delete folder and delete file and folder
- From: steef83
- Re: failed/successfull audit delete folder and delete file and folder
- From: Brian Komar [MVP]
- failed/successfull audit delete folder and delete file and folder
- Prev by Date: Re: failed/successfull audit delete folder and delete file and folder
- Next by Date: Re: failed/successfull audit delete folder and delete file and folder
- Previous by thread: Re: failed/successfull audit delete folder and delete file and folder
- Next by thread: Re: failed/successfull audit delete folder and delete file and folder
- Index(es):
Relevant Pages
|
|
