Solved

How to audit when files are moved, created, changed by domain users SBS 2008

Posted on 2011-03-01
3
2,575 Views
Last Modified: 2013-04-17
I have a server (SBS 2008) where shared folders keep getting moved by domain users, how can I audit when a folder has been moved, and find out which user is moving them? can this be done in local policies? or is there a inexpensive 3rd party software for this.
0
Comment
Question by:advantagec
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 37

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 35014458
2. Locate the file or folder that you want to audit.

3. Right-click the file or folder, click Properties, and then click the
Security tab.

4. Click Advanced, and then click the Auditing tab.

5. Perform one of the following tasks:
1) To set up auditing for a new user or group, click Add, type the name of
the user or group that you want to configure in the Enter the object name
to select box, and then click OK.
2) To remove auditing for an existing group or user, click the group or
user name, click Remove, click OK, and then skip the rest of this
procedure.
3) To view or change auditing for an existing group or user, click the
group or user name, and then click Edit.

6. In the Apply onto box, click This folder, subfolders and files.

7. In the Access box, select the appropriate check boxes to indicate the
actions you want to audit:
List Folder/Read data        select Success Fail and Failed.
Change File/Write Date     Select Success and Failed.
Delete Subfolder and Files     select Success Fail and Failed.
Delete     select Success Fail and Failed

8. If you want to prevent subsequent files and subfolders of the original
object from inheriting these audit settings, click to select the Apply
these auditing entries to objects and/or containers within this container
only check box.
0
 
LVL 37

Expert Comment

by:Jian An Lim
ID: 35014461
0
 

Author Comment

by:advantagec
ID: 35018610
Awesome, yes I did turn on auditing, we'll see how that works, thanks!
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question