editperfil
asked on
How to know wich user is deleting some files and folders
Hello. I have windows 2003 server with AD. I want to know who is deleting some files or foldes. I enable audit in the parent folder but i dont see events in the event viewer. What can i do?
Last Comment
ASKER
This article is for windows NT and I have 2003 server
You need to enable auditing in your policies as well as the file or folder object.
Right click the folder, choose properties, from the security tab, click Advanced, and from the Auditing tab, add auditing for the user or group you want to audit along with the actions you want to audit (delete)
Right click the folder, choose properties, from the security tab, click Advanced, and from the Auditing tab, add auditing for the user or group you want to audit along with the actions you want to audit (delete)
ASKER
I allready do that but i dont see events in security. I delete, rename and copy files but i dont get results
Did you enable it in your policies?
Start->Run->secpol.msc
Under Local Policies, Audit Policy
Start->Run->secpol.msc
Under Local Policies, Audit Policy
http://support.microsoft.com/kb/310399 is for xp, but the same applies for 2003
ASKER
I also do that but nothing appears in the log
You are looking in security log, correct?
ASKER
Yes
What auditing policy did you turn on?
I believe it should be object access...
I believe it should be object access...
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
yes, i audit objects and success. I enable the audit in all domain controllers and is working
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
Yes is working now.
FYI:
HOW TO: Audit Active Directory Objects in Windows Server 2003
http://support.microsoft.com/kb/814595
HOW TO: Audit Active Directory Objects in Windows Server 2003
http://support.microsoft.com/kb/814595
Forced accept.
Computer101
EE Admin
Computer101
EE Admin
OS Security
Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.
22K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
http://articles.techrepublic.com.com/5100-1035_11-5587651.html