Log of file read/write/deletions.
I would like to create a log of all file read/write/deletions for a specified folder or group of folders or drives showing the name of the file, the folder it was in, time/date and the AD user that made the transaction. I'm pretty sure that Windows Server 2003 does not have this built in, but does anyone know of a third party tool or extension that can accommodate this?
March 12th, 2009 7:47pm

Hi, You can try to do this through auditing via Group Policy; however, this may not provide you all the information you seek. To enable auditing of the folder for the "Authenticated Users" group, follow these steps: Navigate to the File System tree of the GPO you are editing (Computer Configuration/Windows Settings/Security Settings/File System) Right-click File System, and then click Add File. Browse for the file/folder that you want to audit and click OK. Click Advanced, then click the Auditing tab. Click Add. In Name, type Authenticated Users, and then click OK. Select the appropriate entry in the Apply onto list. In the Access box, indicate the actions you want to audit by selecting the appropriate check boxes. Refer to this link for further info regarding this: http://technet.microsoft.com/en-us/library/cc757864.aspxFor a third-party solution, you may want to look into Greyware's System Change Log.Regards,Salvador Manaois IIIMCITP | Enterprise & Server AdminMCSE MCSA MCTS CIWA C|EHBytes & Badz: http://badzmanaois.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2009 4:55am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics