Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

audit policy for files and directories

Posted on 2006-11-16
3
Medium Priority
?
232 Views
Last Modified: 2010-04-18
I've enabled audit policies for my desired files and directories.  Now I'm a little confused on setting the permissions.  I would like to log all successful and failed attemps to my specified files from all users except the administrator.

How can I do this?  I currently have it logging only failed attempts from the administrator and below that entry I have it logging all failed and successful attempts from anyone in the 'everyone' group.
0
Comment
Question by:gopher_49
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Author Comment

by:gopher_49
ID: 17958863
Also,

The file access audits get logged into the Security log for a few mins then it quits.  I get other logs, however,  the audits I just recently enabled are not being logged anymore.  It seems that another policy is overwritting the new settings.  I've enabled auditing in the 'Domain Controller Audit Policy'.  I left the domain policy set to 'not configured'.  

This stands true for any new audit setting aside from file audits?!  Any thoughts?
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 750 total points
ID: 17960235
i take it this is SBS server?

as far as your permissions go, just add the users that you want to audit in (or the everyone group/Domain Users Group) and select your successful and unsuccessful attempts

run a gpresult on one of the DC's and see what policies are applying. This (if not SBS) should all be applied in the default domain controllers group policy
0
 

Author Comment

by:gopher_49
ID: 17960405
It's win 2003 standard and I've done everything above.  The Domain Controller Policy is being applied succesfully.  It will audit for awhile and it will then quit.  It's weird.  Also, in the GPMC application I have the Domain Controller Policy linked, however, it's not enforced.  It's being applied though.....
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question