Solved

How to audit when files are moved, created, changed by domain users SBS 2008

Posted on 2011-03-01
3
2,530 Views
Last Modified: 2013-04-17
I have a server (SBS 2008) where shared folders keep getting moved by domain users, how can I audit when a folder has been moved, and find out which user is moving them? can this be done in local policies? or is there a inexpensive 3rd party software for this.
0
Comment
Question by:advantagec
  • 2
3 Comments
 
LVL 36

Accepted Solution

by:
Jian An Lim earned 500 total points
ID: 35014458
2. Locate the file or folder that you want to audit.

3. Right-click the file or folder, click Properties, and then click the
Security tab.

4. Click Advanced, and then click the Auditing tab.

5. Perform one of the following tasks:
1) To set up auditing for a new user or group, click Add, type the name of
the user or group that you want to configure in the Enter the object name
to select box, and then click OK.
2) To remove auditing for an existing group or user, click the group or
user name, click Remove, click OK, and then skip the rest of this
procedure.
3) To view or change auditing for an existing group or user, click the
group or user name, and then click Edit.

6. In the Apply onto box, click This folder, subfolders and files.

7. In the Access box, select the appropriate check boxes to indicate the
actions you want to audit:
List Folder/Read data        select Success Fail and Failed.
Change File/Write Date     Select Success and Failed.
Delete Subfolder and Files     select Success Fail and Failed.
Delete     select Success Fail and Failed

8. If you want to prevent subsequent files and subfolders of the original
object from inheriting these audit settings, click to select the Apply
these auditing entries to objects and/or containers within this container
only check box.
0
 
LVL 36

Expert Comment

by:Jian An Lim
ID: 35014461
0
 

Author Comment

by:advantagec
ID: 35018610
Awesome, yes I did turn on auditing, we'll see how that works, thanks!
0

Featured Post

ScreenConnect 6.0 Free Trial

At ScreenConnect, partner feedback doesn't fall on deaf ears. We collected partner suggestions off of their virtual wish list and transformed them into one game-changing release: ScreenConnect 6.0. Explore all of the extras and enhancements for yourself!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question