Auditing Permissions - Server 2003
Posted on 2009-05-10
I have a problem with one server on a domain of 11 Windows 2003 servers. Since this was migrated from a smaller HP box to the current 'box users have experienced very slow access to files, access denied faults requiring permissions to be reset, folders disappearing, system freezing for > 60sec on attempting to reset permissions. Random users are affected by all these faults.
I've found a question posted back in 2004 ( See Q_21233866 ) with someone having a similar problem and I've also referred to this issue in my open question ( Q_24382549 ) which is about wiping and resetting the folder share permissions and the NTFS security.
Having reviewed various TechNet pages, I am unclear if turning on NTFS auditing will affect existing permissions. Please can someone clarify:
1. the steps required to enable NTFS auditing so that I can track which accounts (if any) are triggering these changes to permissions, deleting folders etc.
2. Which actions should be audited for success / failure
3. Confirm that setting the auditing does not change any of the existing granted user share permissions or NTFS security.
Server is Dell PowerEdge 2950, dual quad core cpu, 16GB ram, 2 x 146GB mirrored SAS for system partitiion, 4 x 1 TB Sata Raid 5 data partition, dual teamed 1GB NICs, Windows Server 2003 SP2