Re: Monitor Access To A Particular Share



Auditing filesystem access is a two part affair.
One must enable Audit object access, and then
one needs to set auditing (in the NTFS permissions
dialog, Audit page) specification on what must be
audited and for what. Be careful not to audit for
too much as actively used storage can generate
very much in the security log.


<kbrokaw00@xxxxxxxxx> wrote in message
news:1171840075.095762.165040@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I would like to know who is accessing a server share. I thought
enabling auditing of success events on the server would do the trick,
but it did not.

I would appreciate any suggestions.

Regards,
KB



.



Relevant Pages

  • Re: Autoexec.nt file missing?
    ... you can't enable Auditing on a computer running Home Edition. ... You must specify what to audit. ... example, a file, folder, registry key, printer, and so forth-that has its ...
    (microsoft.public.windowsxp.newusers)
  • Re: auditing
    ... Enable auditing of account management will log the creation and changes to ... You can audit Directory Service access to audit OU's. ... This security setting determines whether to audit each event of account ... For specific instructions about how to configure auditing policy settings, ...
    (microsoft.public.win2000.active_directory)
  • Re: Autoexec.nt file missing?
    ... you can't enable Auditing on a computer running Home Edition. ... You must specify what to audit. ... > example, a file, folder, registry key, printer, and so forth-that has its ...
    (microsoft.public.windowsxp.newusers)
  • Re: Auditing Privilege Use - failure only but still get Success
    ... Success only (applies to remote access, ... Audit account management: No Auditing ... Audit privilege use: No Auditing ...
    (microsoft.public.win2000.group_policy)
  • RE: Capture Logins
    ... Auditing with Windows Server 2003 and XP is configured in several different ... auditing through the audit policy, which will usually begin the audit ... Reports changes to user accounts. ... Audit Policy Change: ...
    (microsoft.public.windows.server.general)