?
Solved

File Server Auditing

Posted on 2008-10-01
3
Medium Priority
?
355 Views
Last Modified: 2012-08-13
Hi,

   I have a client who has as she says a "ghost moving files from folders to other folders" within her organization.  She feels that nobody could possibly be moving them because they are a small office and everyone is as confused as she is.   Be that as it may, I have never seen a ghost in a server so I'm sure that someone is moving them around, possibly by accident.  Anyway, I want to enable secury settings so I go to secpol.msc and go to local machine.  I want to audit the access to particular folders so I try to audit object access (I think this is the right thing to enable) and when I go to properties, where I want to "Audit these attempts: ", the check boxes for success and failure are both grayed out.  Is there a process I need to make sure is started before I can do this?  Please let me know....
0
Comment
Question by:Greg612
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 18

Accepted Solution

by:
Americom earned 2000 total points
ID: 22621123
Those are grayed out probably you have Domain Group Policy enable.

Anyway, to enable auditing on file server for specific volume, folder, or file, you need to logon to the file server and select the interested data to audit.
For example, if you want to audit a folder, right-click on the folder-->properties-->Security-->Advanced-->Auditing--Add. Select the group or users that you want to audit. Once you locate the user or group, you will see all the Accesses for are looking for.

0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question