Solved

File Server Auditing

Posted on 2008-10-01
3
346 Views
Last Modified: 2012-08-13
Hi,

   I have a client who has as she says a "ghost moving files from folders to other folders" within her organization.  She feels that nobody could possibly be moving them because they are a small office and everyone is as confused as she is.   Be that as it may, I have never seen a ghost in a server so I'm sure that someone is moving them around, possibly by accident.  Anyway, I want to enable secury settings so I go to secpol.msc and go to local machine.  I want to audit the access to particular folders so I try to audit object access (I think this is the right thing to enable) and when I go to properties, where I want to "Audit these attempts: ", the check boxes for success and failure are both grayed out.  Is there a process I need to make sure is started before I can do this?  Please let me know....
0
Comment
Question by:Greg612
3 Comments
 
LVL 18

Accepted Solution

by:
Americom earned 500 total points
ID: 22621123
Those are grayed out probably you have Domain Group Policy enable.

Anyway, to enable auditing on file server for specific volume, folder, or file, you need to logon to the file server and select the interested data to audit.
For example, if you want to audit a folder, right-click on the folder-->properties-->Security-->Advanced-->Auditing--Add. Select the group or users that you want to audit. Once you locate the user or group, you will see all the Accesses for are looking for.

0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Suggested Solutions

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found listed in my profile here: http:…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now