Hi On Win2008 server we need to establish some kind of Audit policy, that will log who has accessed (and when) files in certain folders. I know that this could be done via setting AuditPolicy on a desired folder, but I'm wondering if there is a way, that a CIO will get daily reports who has accessed (and when) files in this folder? Can this be done (and how) on a system level, or are there any 3rd party programs that will allow us to acomplish this? Regards,Miha

For audit, you can refer to, like you said, to the audit policy of Microsoft Windows Server 2008: http://technet.microsoft.com/fr-fr/library/cc766468(WS.10).aspx Now, you need to have an application that generates daily reports of who accessed these files. AFAIK, there is no Microsoft utility that generates such reports and you only can get them by collecting manually log files on eventviewer. Personally, I don't know if there is 3rd party application that performs such things but you can develop your own application to generate such reports. You can use VS2010 C# to develop a such one. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Thanks! We have set AuditPolicy on a specified folder, so I'm looking for a SW that will collect certain events from security event log and sends them via email on a daily routine? Any ideas of that kind of software? Regards,Miha

Like I said no. I don't have an idea about such third party software. You can develop your own application. I don't think it will take much time. You can use Visual Studio 2010 C# to develop it. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Thanks! Have found a great software EventLogAnalyzer. It is free for monitoring 5 hosts Regards,Miha