Audit use of CD-ROM

From: Johnny Mac <JohnnyMac@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 28 Jul 2008 07:18:01 -0700

Ok I know I'm overthinking this one but can anyone tell me what file I should
audit in order to determine if the CD-COM was used for recording or is there
a audit policy madness? Currently I'm auditing execution of the software
used to write to CD but wondered if there was somthing more general I can
audit?

Take care,
Johnny Mac
.

Prev by Date: Re: Don't Administrators have access to everything?
Next by Date: Re: Don't Administrators have access to everything?
Previous by thread: Administrators
Next by thread: Re: Service Pack 3
Index(es):
- Date
- Thread

Relevant Pages

Re: SICKO, 2007 movie
... Read this article for the truth Michael Moore doesn't want you to ... Currently there is a fight going on over medics care. ... The usual audit on all of us is the lack of a job or ... Professional criticism of the system that has evolved. ...
(alt.support.diabetes)
Re: Auditing mailbox access
... you may dump acl to get the AD rights as part of your audit. ... You should take care of herited permission (an admin may have put right on the storage group so it can open mailboxes...) ...
(microsoft.public.exchange.admin)
Re: Problems with kernel device driver service
... you're seeing a whole bunch of audit entries that you should care ... This message corresponds to a Security 567 message, ... Read more about Audit object access and Audit: ...
(microsoft.public.windowsxp.configuration_manage)