Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

File Server Auditing

Posted on 2008-10-01
3
Medium Priority
?
357 Views
Last Modified: 2012-08-13
Hi,

   I have a client who has as she says a "ghost moving files from folders to other folders" within her organization.  She feels that nobody could possibly be moving them because they are a small office and everyone is as confused as she is.   Be that as it may, I have never seen a ghost in a server so I'm sure that someone is moving them around, possibly by accident.  Anyway, I want to enable secury settings so I go to secpol.msc and go to local machine.  I want to audit the access to particular folders so I try to audit object access (I think this is the right thing to enable) and when I go to properties, where I want to "Audit these attempts: ", the check boxes for success and failure are both grayed out.  Is there a process I need to make sure is started before I can do this?  Please let me know....
0
Comment
Question by:Greg612
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 18

Accepted Solution

by:
Americom earned 2000 total points
ID: 22621123
Those are grayed out probably you have Domain Group Policy enable.

Anyway, to enable auditing on file server for specific volume, folder, or file, you need to logon to the file server and select the interested data to audit.
For example, if you want to audit a folder, right-click on the folder-->properties-->Security-->Advanced-->Auditing--Add. Select the group or users that you want to audit. Once you locate the user or group, you will see all the Accesses for are looking for.

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question