?
Solved

Windows 2008r2 - Who created the shares?

Posted on 2012-04-11
9
Medium Priority
?
403 Views
Last Modified: 2012-04-26
Is there a way to tell who created shares on a server?  If so, how?  We have some rouge admins that share with the everyone group instead of authenticated users.
0
Comment
Question by:BrianRB
  • 3
  • 3
  • 2
  • +1
9 Comments
 
LVL 3

Expert Comment

by:doublestick
ID: 37833411
maybe the event logs?
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37833413
If you have auditing enabled you can search the event logs to see modifications made to objects (Audit object access).
0
 
LVL 2

Author Comment

by:BrianRB
ID: 37833416
God that would take forever to go through would it not?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 9

Accepted Solution

by:
Geodash earned 2000 total points
ID: 37833428
I know its a shot in the dark but I use this on a couple file servers.

It does full auditing of file servers and shares. Its not free and wont give you any historical information, but if it is something you want to manage in the future - well worth the money!

http://www.scriptlogic.com/products/enterprisesecurityreporter/
0
 
LVL 21

Expert Comment

by:motnahp00
ID: 37833446
Not necessarily. Create a filter and configure the following:

Logged: your timeframe you want query
Event sources: Microsoft Windows security auditing
Task category: File System

This should save you some time.
0
 
LVL 2

Author Comment

by:BrianRB
ID: 37833450
Great one!!  Doesn't look cheap though. :(
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37833460
Its not super expensive mine were $500 per server. You can download a free 30 day fully functional eval too.
0
 
LVL 2

Author Comment

by:BrianRB
ID: 37833466
SERIOUSLY?  Ok, that is cheap.  Works well?  You like it?
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37833526
Absolutely love it! But, get the trial first. Try it to make sure it will work for you. Full 30 day fully functional!
0

Featured Post

Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
The Windows Firewall provides an important layer of protection and a rich interface to configure it. Unfortunately, it lacks item level filtering. This article details my process of implementing firewall-as-code to reduce GPO bloat.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question