Solved

Audit Logs in Windows XP

Posted on 2004-10-15
4
175 Views
Last Modified: 2013-12-07
I have several shared foldes on a Windows XP Professional machine for which I want to keep track of the network users that access them. That is I want to know which computers (or users) access which folder, the time, the date etc. Is there any way that I can do that?

My network uses a workgroup not a domain.

Thanks



0
Comment
Question by:starman75
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 8

Expert Comment

by:deadite
ID: 12317065
I'm not positive without testing, but I would suggest 2 things to check out to see if it recorded:

1)  Shared Folders (right click my computer, manage, shared folders in the left pane).  

2) Even Viewer (right click my computer, manage, event viewer in the left pane).  Check the logs to see if they record anything on accessing the folder on the local machine.

Additionally, I know there are server programs that will record event logs on every  machine in a network.  One of these may do what you want.
0
 
LVL 3

Accepted Solution

by:
_Jochen_ earned 125 total points
ID: 12318245
hi,
select the folder which you want to audit. right click it, go to "sharing and security", go to security tab, select advanced, go to audit tab, click "add" and type in "everyone", then select what you want to audit (successes or failure or both).
You can see the who access the folder in the event Viewer in Security.
jo
0
 
LVL 3

Expert Comment

by:_Jochen_
ID: 12318363
i forgot something,
you have to open your "Local Security Settings" console (%SystemRoot%\system32\secpol.msc /s), go to local policies, then audit policies and activate objectaccess for success and failure.
then it works.
0
 

Author Comment

by:starman75
ID: 12327911
Excellent. Thanks!
0

Featured Post

WordPress Tutorial 1: Installation & Setup

WordPress is a very popular option for running your web site and can be used to get your content online quickly for the world to see. This guide will walk you through installing the WordPress server software and the initial setup process.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question