Enabled Auditing but remote mstsc sessions are not recorded. Nor files access and deleted.

Posted on 2009-12-23
Last Modified: 2012-05-08

Enabled Auditing but remote mstsc sessions are not recorded. Nor files access and deleted.

Windows xp

I want the deletion of files/Copying/Accessed and mstsc sessions data to be captured.

Question by:bsharath
    LVL 11

    Accepted Solution

    There are tools like Quest Change Auditor for those kind of operations. XP does not log the information you want by default.
    LVL 11

    Assisted Solution

    Hello. I guess you are enabling the policies in your windows xp workstation and want to audit the actions when somebody logs remotely on this windows xp computer. When you log from your computer to another computer those actions are something that happen on that another computer. In the remote computer enable audit policies and look for the events.

    You have to enable the policies and set the property also in the audited folders. Also you have to define the users that will be audited.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Step by step guide to Clean and Sort your windows registry! Introduction: Always remember: A Clean registry = Better performance = Save your invaluable time In this article we're going to clear our registry manually! Yes, manually! The e…
    Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
    In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now