Solved

Having trouble setting audit log for file access, changes and deletions in Windows Server 2003, SBS

Posted on 2008-10-09
2
214 Views
Last Modified: 2013-12-04
I have set my Audit Objects on and have changed some files on the server, but still do not see these changes in the Event Viewer log.  I can see users logging in and out, but not file changes.  Am I looking in the right place?  I even added an audit in the folder I am most interested in and still see nothing.

I feel like I am missing a "switch" somewhere.

I have made setting changes in Domain Controller Policies and Domain Policies.  Could someone also tell me what the difference is in these two windows?

My concern is we have had entire folders disappear more than once and would like to see who may be doing this.

Thank you in advance for your help.
0
Comment
Question by:bunky9960
2 Comments
 
LVL 4

Accepted Solution

by:
placebo69a earned 500 total points
ID: 22682541
Turning on Audit Object Access is not enough for events to start popping up in your security log. You have to apply the auditing policy to specfic files or folders in order to catch events concerning those files and folders. This can be done by following the instructions in this article.
Let me know if this helps. :)
0
 

Author Closing Comment

by:bunky9960
ID: 31504689
Yes!  This worked great.  I can now track the file usage and see who is doing what they should not be doing.  Thanks again.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
A short film showing how OnPage and Connectwise integration works.
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now