Solved

audit policy for files and directories

Posted on 2006-11-16
3
222 Views
Last Modified: 2010-04-18
I've enabled audit policies for my desired files and directories.  Now I'm a little confused on setting the permissions.  I would like to log all successful and failed attemps to my specified files from all users except the administrator.

How can I do this?  I currently have it logging only failed attempts from the administrator and below that entry I have it logging all failed and successful attempts from anyone in the 'everyone' group.
0
Comment
Question by:gopher_49
  • 2
3 Comments
 

Author Comment

by:gopher_49
Comment Utility
Also,

The file access audits get logged into the Security log for a few mins then it quits.  I get other logs, however,  the audits I just recently enabled are not being logged anymore.  It seems that another policy is overwritting the new settings.  I've enabled auditing in the 'Domain Controller Audit Policy'.  I left the domain policy set to 'not configured'.  

This stands true for any new audit setting aside from file audits?!  Any thoughts?
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 250 total points
Comment Utility
i take it this is SBS server?

as far as your permissions go, just add the users that you want to audit in (or the everyone group/Domain Users Group) and select your successful and unsuccessful attempts

run a gpresult on one of the DC's and see what policies are applying. This (if not SBS) should all be applied in the default domain controllers group policy
0
 

Author Comment

by:gopher_49
Comment Utility
It's win 2003 standard and I've done everything above.  The Domain Controller Policy is being applied succesfully.  It will audit for awhile and it will then quit.  It's weird.  Also, in the GPMC application I have the Domain Controller Policy linked, however, it's not enforced.  It's being applied though.....
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now