• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

Keep track of activities in a folder

I would like to keep track of all accesses to a directory and within a directory per user. I have Windows SBS Server 2003. I would like to have all accesses logged in the event viewer. Is this possible?
0
Bartley1969
Asked:
Bartley1969
  • 2
1 Solution
 
Toni UranjekConsultant/TrainerCommented:
Hi!

Yes it's possible.
First you have to enable Object Access auditing policy: http://technet2.microsoft.com/windowsserver/en/library/d9fea7ea-61e5-43b1-98cd-b02a09f101561033.mspx?mfr=true
Second you have to enable auditing on file or folder for specific group: http://technet2.microsoft.com/windowsserver/en/library/ecf63dcf-17e7-4279-91ff-beb11bd0d6881033.mspx?mfr=true
Do not enable auditing on all files and folders for Everyone group, because it will generate huge amount events and might overload your server.


HTH

Toni
0
 
Bartley1969Author Commented:
I didn't see the Object Access auditing policy, how do I create?
0
 
Toni UranjekConsultant/TrainerCommented:
Hi!

I believe that files are on SBS server. If yes, then follow these instructions:

Open Domain Controller Security Policy.
In the console tree, click Audit Policy.

Where? Computer Configuration/Windows Settings/Security Settings/Local Policies/Audit Policy
 
In the details pane, double-click Audit object access.
 
Do one or both of the following, and then click OK.
- To audit successful attempts, select the Success check box.
- To audit unsuccessful attempts, select the Failure check box.

HTH

Toni
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now