Solved

Having trouble setting audit log for file access, changes and deletions in Windows Server 2003, SBS

Posted on 2008-10-09
2
215 Views
Last Modified: 2013-12-04
I have set my Audit Objects on and have changed some files on the server, but still do not see these changes in the Event Viewer log.  I can see users logging in and out, but not file changes.  Am I looking in the right place?  I even added an audit in the folder I am most interested in and still see nothing.

I feel like I am missing a "switch" somewhere.

I have made setting changes in Domain Controller Policies and Domain Policies.  Could someone also tell me what the difference is in these two windows?

My concern is we have had entire folders disappear more than once and would like to see who may be doing this.

Thank you in advance for your help.
0
Comment
Question by:bunky9960
2 Comments
 
LVL 4

Accepted Solution

by:
placebo69a earned 500 total points
ID: 22682541
Turning on Audit Object Access is not enough for events to start popping up in your security log. You have to apply the auditing policy to specfic files or folders in order to catch events concerning those files and folders. This can be done by following the instructions in this article.
Let me know if this helps. :)
0
 

Author Closing Comment

by:bunky9960
ID: 31504689
Yes!  This worked great.  I can now track the file usage and see who is doing what they should not be doing.  Thanks again.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question