Dear all, I use a window 2008 standard R2 as a file server. I created some share folders for very department with difference user id and password. The boss want to view the log for following purpose : (1)which user read or edit the documents? (2)Which user copy the documents to his PC or external USB (3) How control the user can read the documents,but can not copy the documents ? Any commends ? Thank you

(1)which user read or edit the documents? You will have to enable auditing http://msmvps.com/blogs/richardwu/archive/2010/07/16/enabling-file-and-folder-auditing.aspx (2)Which user copy the documents to his PC or external USB (3) How control the user can read the documents,but can not copy the documents ? You will have to implement RMS http://technet.microsoft.com/en-us/windowsserver/dd448611 http://www.virmansec.com/blogs/skhairuddin

Hi, you can use the audit event logs, take a look at this link can help you : http://msdn.microsoft.com/en-us/library/cc645889.aspx Oussama Oueslati | System Engineer | vNext Consulting

In addition to Syed & Oussama. Hope this wiki article will also helpful to you. Thanks