Auditing file/folder access in a Windows Server 2003 domain

I've read several questions and answers on how to audit file/folder access in a Server 2003 domain but I still have a question about what I'm seeing (not seeing).  This is a member server (the Exchange server), not a domain controller, so I"ve enabled Object Access Auditing in the Local Security policy on the server and also added an auditing object on the specific folder for all actions by the group Domain Users, of which I'm obviously a member.  I know auditing is working by looking at the security log in Event Viewer, yet when I access that folder using my personal account on the domain and create a subfolder or file, I don't see a log of that specific activity in the security log.  Is there something I'm missing here?  I also see tons of logs of Object Access to the information store that I didn't want.  Can someone point me in the right direction?  I only want to see access to specific files/folders, not all the other audits.
fabiounessAsked:
Who is Participating?
 
GovvyConnect With a Mentor Commented:
Use a third party tool such as Varonis
0
 
fabiounessAuthor Commented:
I was hoping I'd be able to get Windows to do it for free since most third-party software only has a limited free trial.  I'm currently checking out Netwrix in the meantime.
0
 
JustMy2CentsCommented:
FileAudit will do the job.
This software solution monitors, archives and reports on access (or access attempts) to sensitive files and folders stored on Microsoft Windows systems.
The cost is about $200 per server.
http://www.isdecisions.com/products/fileaudit
0
 
fabiounessAuthor Commented:
Well, it seems that third-party software is the only answer and govvy answered that before justmy2cents, so I suppose the points would go to govvy?  Can a moderator please decide?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.