Enabling Auditing on the whole Drives

Posted on 2007-09-28
Last Modified: 2012-06-27

I want to enable Auditing of all the drives in my machine.
What are the steps i need to follow to enable it.
If i enable auditing on a 250 GB HDD will it slow down my system.

Question by:bsharath
    LVL 8

    Accepted Solution

    you have to configure audit policy first   at "Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy"

    you can set the policy "Audit object access" to success or failure.

    then you have to enable auditing on each file system object where you want to audit. go to file/folder properties and on advanced setting dialog on auditing tab add appropriate auditing requirement.

    if you do this for entire drive and for full control this will dangerously slow down the system because each and every file access is logged in the event log.

    you also have to increase the size of security log to few GB for this auditing.
    LVL 12

    Assisted Solution

    LVL 44

    Assisted Solution

    "If i enable auditing on a 250 GB HDD will it slow down my system."

    YES, dramatically.

    Why even do this, it is not worth the overhead.
    Why not just state what you are trying to accomplish, and we can suggest a better way, perhaps?

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    As hardware bugs go, this is a strange one! I upgraded a laptop in December 2011 with a 512GB Crucial m4 2.5-inch/9.5mm SATA Solid State Drive (SSD), Crucial part number CT512M4SSD2: …
    When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now