• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 450
  • Last Modified:

Enabled Auditing but remote mstsc sessions are not recorded. Nor files access and deleted.

Hi,

Enabled Auditing but remote mstsc sessions are not recorded. Nor files access and deleted.

Windows xp

I want the deletion of files/Copying/Accessed and mstsc sessions data to be captured.

Regards
Sharath
0
bsharath
Asked:
bsharath
2 Solutions
 
Batuhan CetinCommented:
There are tools like Quest Change Auditor for those kind of operations. XP does not log the information you want by default.
0
 
enriquecadalsoCommented:
Hello. I guess you are enabling the policies in your windows xp workstation and want to audit the actions when somebody logs remotely on this windows xp computer. When you log from your computer to another computer those actions are something that happen on that another computer. In the remote computer enable audit policies and look for the events.

You have to enable the policies and set the property also in the audited folders. Also you have to define the users that will be audited.
0

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now