?
Solved

How to audit when files are moved, created, changed by domain users SBS 2008

Posted on 2011-03-01
3
Medium Priority
?
2,745 Views
Last Modified: 2013-04-17
I have a server (SBS 2008) where shared folders keep getting moved by domain users, how can I audit when a folder has been moved, and find out which user is moving them? can this be done in local policies? or is there a inexpensive 3rd party software for this.
0
Comment
Question by:advantagec
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 37

Accepted Solution

by:
Jian An Lim earned 2000 total points
ID: 35014458
2. Locate the file or folder that you want to audit.

3. Right-click the file or folder, click Properties, and then click the
Security tab.

4. Click Advanced, and then click the Auditing tab.

5. Perform one of the following tasks:
1) To set up auditing for a new user or group, click Add, type the name of
the user or group that you want to configure in the Enter the object name
to select box, and then click OK.
2) To remove auditing for an existing group or user, click the group or
user name, click Remove, click OK, and then skip the rest of this
procedure.
3) To view or change auditing for an existing group or user, click the
group or user name, and then click Edit.

6. In the Apply onto box, click This folder, subfolders and files.

7. In the Access box, select the appropriate check boxes to indicate the
actions you want to audit:
List Folder/Read data        select Success Fail and Failed.
Change File/Write Date     Select Success and Failed.
Delete Subfolder and Files     select Success Fail and Failed.
Delete     select Success Fail and Failed

8. If you want to prevent subsequent files and subfolders of the original
object from inheriting these audit settings, click to select the Apply
these auditing entries to objects and/or containers within this container
only check box.
0
 
LVL 37

Expert Comment

by:Jian An Lim
ID: 35014461
0
 

Author Comment

by:advantagec
ID: 35018610
Awesome, yes I did turn on auditing, we'll see how that works, thanks!
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses
Course of the Month11 days, 15 hours left to enroll

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question