Solved

Audit on fileserver

Posted on 2011-09-07
4
313 Views
Last Modified: 2012-05-12
Hi,

I have a fileserver windows 2003 as domain member of ad 2008

I need to monitor some folders so I can know how open it , delete it , change in it , ...

Do you recommend any software

0
Comment
Question by:jeanmonline
  • 3
4 Comments
 
LVL 11

Accepted Solution

by:
slemmesmi earned 500 total points
ID: 36496044
Dear jeanmonline,

you can use the built-in auditing in Windows Server 2003.
Please refer to
http://technet.microsoft.com/en-us/library/cc784387(WS.10).aspx 
as well as
http://blogs.technet.com/b/askds/archive/2011/03/10/global-object-access-auditing-is-magic.aspx

You can also (if you don't like the Microsoft solution) check out ScriptLogic's FileSystemAuditor (which however is not free) http://www.scriptlogic.com/products/filesystemauditor/

Kind regards,
Soren
0
 
LVL 77

Expert Comment

by:arnold
ID: 36496189
Why not use the auditing options available anduse splunk or something similar to collect the security event logs per server.

properties of the directory, security tab, advanced, auditing tab.
You can add the group of user whose access should be audited.
0
 
LVL 11

Expert Comment

by:slemmesmi
ID: 36919635
Dear jeanmonline,

did you get any further with this?

Kind regards,
Soren
0
 
LVL 11

Expert Comment

by:slemmesmi
ID: 36956982
Dear jeanmonline,

did you get any further with this?

Kind regards,
Soren
0

Featured Post

Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now