Link to home
Start Free TrialLog in
Avatar of cookd47
cookd47

asked on

Report access to secure file share Windows 2003 Srever Std edition.

Need tool, or application to report access to shared folder in Windows 2003 Server Std Edition
This report needs to be sent by email to designated user. Should report id, login times, and files accessed.
ASKER CERTIFIED SOLUTION
Avatar of McKnife
McKnife
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Perhaps the most direct way to monitor share access is to enable object access auditing. This enables Windows to place an event in the Security event log when someone accesses a folder or file, fails at that action, or both. Monitoring successful attempts helps track who is using the folder; monitoring unsuccessful attempts helps identify authorized users who are having problems connecting or users who are attempting to access a share for which they aren't authorized.

   1. Go to Security Settings\Local Policies\Audit Policy\Audit Object Access and enable object access auditing in local or group policy.
   2. To configure auditing for individual folders and files, right-click the folder or file and choose Properties.
   3. Click the Security tab, and click Advanced.
   4. Click the Auditing tab, click Add, add a group or user, and click OK.
   5. In the resulting Auditing Entry dialog box, place checks in the Successful and/or Failed columns for each event you want to monitor.
   6. Click OK to close the dialog box, close the remaining dialog boxes, and close the Properties for the folder.

Note: Enabling auditing on a heavily used folder or file can generate a large number of events in the Security log.

To get it mailed you can write a small program yourself that runs on the machine having the shared folder.

Hope that helps
Viral !!~