Solved

Audit on fileserver

Posted on 2011-09-07
4
310 Views
Last Modified: 2012-05-12
Hi,

I have a fileserver windows 2003 as domain member of ad 2008

I need to monitor some folders so I can know how open it , delete it , change in it , ...

Do you recommend any software

0
Comment
Question by:jeanmonline
  • 3
4 Comments
 
LVL 11

Accepted Solution

by:
slemmesmi earned 500 total points
ID: 36496044
Dear jeanmonline,

you can use the built-in auditing in Windows Server 2003.
Please refer to
http://technet.microsoft.com/en-us/library/cc784387(WS.10).aspx
as well as
http://blogs.technet.com/b/askds/archive/2011/03/10/global-object-access-auditing-is-magic.aspx

You can also (if you don't like the Microsoft solution) check out ScriptLogic's FileSystemAuditor (which however is not free) http://www.scriptlogic.com/products/filesystemauditor/

Kind regards,
Soren
0
 
LVL 76

Expert Comment

by:arnold
ID: 36496189
Why not use the auditing options available anduse splunk or something similar to collect the security event logs per server.

properties of the directory, security tab, advanced, auditing tab.
You can add the group of user whose access should be audited.
0
 
LVL 11

Expert Comment

by:slemmesmi
ID: 36919635
Dear jeanmonline,

did you get any further with this?

Kind regards,
Soren
0
 
LVL 11

Expert Comment

by:slemmesmi
ID: 36956982
Dear jeanmonline,

did you get any further with this?

Kind regards,
Soren
0

Featured Post

Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
SolarWind and DNS Server 12 36
Encryption of server 7 64
Generic ID in Windows Active directory 3 27
system state backup 1 8
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now