Enabling Auditing on the whole Drives

Posted on 2007-09-28
Medium Priority
Last Modified: 2012-06-27

I want to enable Auditing of all the drives in my machine.
What are the steps i need to follow to enable it.
If i enable auditing on a 250 GB HDD will it slow down my system.

Question by:bsharath

Accepted Solution

mailtosinghs earned 1000 total points
ID: 19983104
you have to configure audit policy first   at "Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy"

you can set the policy "Audit object access" to success or failure.

then you have to enable auditing on each file system object where you want to audit. go to file/folder properties and on advanced setting dialog on auditing tab add appropriate auditing requirement.

if you do this for entire drive and for full control this will dangerously slow down the system because each and every file access is logged in the event log.

you also have to increase the size of security log to few GB for this auditing.
LVL 12

Assisted Solution

ibu1 earned 500 total points
ID: 19983111
LVL 44

Assisted Solution

scrathcyboy earned 500 total points
ID: 19986017
"If i enable auditing on a 250 GB HDD will it slow down my system."

YES, dramatically.

Why even do this, it is not worth the overhead.
Why not just state what you are trying to accomplish, and we can suggest a better way, perhaps?

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

this article is a guided solution for most of the common server issues in server hardware tasks we are facing in our routine job works. the topics in the following article covered are, 1) dell hardware raidlevel (Perc) 2) adding HDD 3) how t…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question