File level Audit
Hi Guys,
Facing a challenge in looking the history for the file.
I am trying to look into the information for a file like, who accessed the file, who tried copied it along with date & time. Is it possible to accomplish it?
secondly, eg I copied the same file and moved to my system locally in the workstation, I have 10 system (Workstations connected), is there any script to looking in by searching in the workstations remotely to find the workstations where the resides.
Thanks in Advance!
Regards,
- Thanks, Sai
September 17th, 2012 5:55am
Hi,
Please refer following
How to monitor file and folder access on a windows file server
http://www.neondemon.com/archives/how-to-monitor-file-and-folder-access-on-a-windows-file-server
Configuring Audit Policies
http://technet.microsoft.com/en-us/library/dd277403.aspx
Advanced Security Audit Policy Step-by-Step Guide
http://technet.microsoft.com/en-us/library/dd408940(v=ws.10).aspx
Apply or modify auditing policy settings for a local file or folder
http://technet.microsoft.com/en-us/library/cc784387(v=ws.10).aspx
you might as well want to try NetWrix File Server Change Reporter, available in 2 versions Free and Shareware
http://www.netwrix.com/file_server_auditing_change_reporting_freeware.html
Scripting related queries, please use The Official Scripting Guys Forum!
http://social.technet.microsoft.com/Forums/en/ITCG/threads
ThanksRegards, Santosh
I do not represent the organisation I work for, all the opinions expressed here are my own.
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
September 17th, 2012 6:20am


