Having trouble setting audit log for file access, changes and deletions in Windows Server 2003, SBS
Posted on 2008-10-09
I have set my Audit Objects on and have changed some files on the server, but still do not see these changes in the Event Viewer log. I can see users logging in and out, but not file changes. Am I looking in the right place? I even added an audit in the folder I am most interested in and still see nothing.
I feel like I am missing a "switch" somewhere.
I have made setting changes in Domain Controller Policies and Domain Policies. Could someone also tell me what the difference is in these two windows?
My concern is we have had entire folders disappear more than once and would like to see who may be doing this.
Thank you in advance for your help.