Auditing for Files on a DC win 2k3

Posted on 2005-05-02
Last Modified: 2012-05-05
I've enabled success and failure for object access for the default domain GPO and the Default DC GPO as well. I've also enabled auditing for the file itself and put the group that I want auditing for in the acl and checked that auditing is enabled for that file and for that group.

Restarted more than once and have run gpupdate on both - several times.

As a test I log into client01 as a user in that group and access this file located on the dc and try to delete it - access denied - this is good since it's read only for the group.

I check the dc event log - no entries for object access at all. I check the client system and there is only one entry for security which gets wiped out everytime  a new user logs in.  I want the local machine to NOT wipe out entries and to audit the file located on the DC.

Can anyone set me straight on this one? ( no ariticles please, thanks)

Thanks in advance!
Question by:zenportafino
    1 Comment
    LVL 4

    Accepted Solution

    If I understood you the log entry will appear if you try to open(read data) file. If you are trying to delete it you should
    - Check Delete and Delete Subfolders options (in audit).
    - Check log entries on DC - not on client's PC as it is a server who will log information


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free camera licenses with purchase of My Cloud NAS

    Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

    Suggested Solutions

    Overview This article describes how to silently install Adobe Reader on multiple workstations, customize the installation options (accept EULA, remove desktop shortcut etc) using the Adobe Customization Wizard and install Adobe Reader font packs an…
    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now