We help IT Professionals succeed at work.

File auditing

jstakely
jstakely asked
on
Medium Priority
353 Views
Last Modified: 2012-05-12
I'm auditing a few folders for sucessful access in Server 2008. I turn on "Audit Object Access" and it BLOWS up the event logs with all sorts of Registry accesses, etc, that I don't care about... Has anyone been able to trim this out a bit?
Comment
Watch Question

Audit Object access will explode all over your event logs every time. Even MS reccomends only using it when tracking down a problem.

Thankfully in 2008+ there is an Advanced Audit Policy Configuration node in the GPO that will allow you to trim it back a little
Check out this article to determine which settings you need to tweak
http://technet.microsoft.com/en-us/library/dd772646(WS.10).aspx

Explore More ContentExplore courses, solutions, and other research materials related to this topic.