Link to home
Start Free TrialLog in
Avatar of MECIT
MECITFlag for United States of America

asked on

Audit folder on windows 2008 server

I would like to be ale to audit a specific folder on a file server.

I would like to audit everyone who deletes, moves and copies files from this specific folder.

How would i set this up?
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of MECIT

ASKER

i followed the screenshots. I wanted to test it out and I deleted a file from the server.
i went to the security log and I could not find anything.
Is there a specific ID I am looking for.
I'm at work (new location) without access to my l lab.  I'll test later to make sure I don't give you a wrong answer on the event log ID.

I don't test on the work/client networks...want to keep my job :)

Thanks

Mike
Avatar of MECIT

ASKER

Is there an Event ID I should be looking for when I delete something in that specific folder?

I followed the steps from the link that was provided.

It does not document when something was deleted.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of MECIT

ASKER

Thanks for the help.