Solved

How to audit when files are moved, created, changed by domain users SBS 2008

Posted on 2011-03-01
3
2,643 Views
Last Modified: 2013-04-17
I have a server (SBS 2008) where shared folders keep getting moved by domain users, how can I audit when a folder has been moved, and find out which user is moving them? can this be done in local policies? or is there a inexpensive 3rd party software for this.
0
Comment
Question by:advantagec
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 37

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 35014458
2. Locate the file or folder that you want to audit.

3. Right-click the file or folder, click Properties, and then click the
Security tab.

4. Click Advanced, and then click the Auditing tab.

5. Perform one of the following tasks:
1) To set up auditing for a new user or group, click Add, type the name of
the user or group that you want to configure in the Enter the object name
to select box, and then click OK.
2) To remove auditing for an existing group or user, click the group or
user name, click Remove, click OK, and then skip the rest of this
procedure.
3) To view or change auditing for an existing group or user, click the
group or user name, and then click Edit.

6. In the Apply onto box, click This folder, subfolders and files.

7. In the Access box, select the appropriate check boxes to indicate the
actions you want to audit:
List Folder/Read data        select Success Fail and Failed.
Change File/Write Date     Select Success and Failed.
Delete Subfolder and Files     select Success Fail and Failed.
Delete     select Success Fail and Failed

8. If you want to prevent subsequent files and subfolders of the original
object from inheriting these audit settings, click to select the Apply
these auditing entries to objects and/or containers within this container
only check box.
0
 
LVL 37

Expert Comment

by:Jian An Lim
ID: 35014461
0
 

Author Comment

by:advantagec
ID: 35018610
Awesome, yes I did turn on auditing, we'll see how that works, thanks!
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question