File Server Auditing
Posted on 2008-10-01
I have a client who has as she says a "ghost moving files from folders to other folders" within her organization. She feels that nobody could possibly be moving them because they are a small office and everyone is as confused as she is. Be that as it may, I have never seen a ghost in a server so I'm sure that someone is moving them around, possibly by accident. Anyway, I want to enable secury settings so I go to secpol.msc and go to local machine. I want to audit the access to particular folders so I try to audit object access (I think this is the right thing to enable) and when I go to properties, where I want to "Audit these attempts: ", the check boxes for success and failure are both grayed out. Is there a process I need to make sure is started before I can do this? Please let me know....