Hi,Is there a way to audit the NW settings change in Windows 2003? I mean if somebody changes the settings in local area connection may be DNS suffix etc. Also how to audit the access events on Default shares like C$ and D$?Which auditing should I enable to achieve this like object access, previlage use or any other?Also, any idea on which events (event ID) will be ogged for above scenerios?Thanks in advance for any help!

Hi, You can enable the object access auditing: Audit object accesshttp://technet.microsoft.com/en-us/library/cc776774(WS.10).aspxThanks.<!----> This posting is provided "AS IS" with no warranties, and confers no rights.