Audit Folder
I would like to track who accesses, creates, deletes any folder/file under a share. So \\server\share\... would mean i would like to track the above information for the folder share i.e. whenever someone deletes, accesses etc it. How could i create a GPO to do this? and how would i apply it to the users in question? Thanks for any help in advance.
October 29th, 2008 7:57pm

Create a GPO or use an existing one and enable auditing of objects:http://technet.microsoft.com/en-us/library/cc757864.aspxhttp://support.microsoft.com/kb/921469To set up auditing: 1. Start Windows Explorer (click Start, point to Programs, point to Accessories, and then click Windows Explorer), and then locate the file or folder that you want to audit. 2. Right-click the file or folder, click Properties, and then click the Security tab. 3. Click Advanced, and then click the Auditing tab. 4. Do one of the following, as applicable: a. To set up auditing for a new group or user: 1. Click Add. In the Name box, type the name of the user that you want to audit. 2. Click OK to automatically open the Auditing Entry dialog box.b. To view or change auditing for an existing group or user, click the name, and then click View/Edit.c. To remove auditing for an existing group or user, click the name, and then click Remove. 5. Under Access, click Successful, Failed, or both Successful and Failed, depending on the type of access that you want to audit. 6. If you want to prevent files and subfolders in the tree from inheriting these audit entries, click to select the Apply these auditing entries check box. Regards,Salvador Manaois III MCSE MCSA CEH MCITP | Enterprise/Server Admin Bytes & Badz : http://badzmanaois.blogspot.com/
Free Windows Admin Tool Kit Click here and download it now
October 29th, 2008 8:04pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics