Solved

Event 4670: Files/Folder Audit Permission Reporting

Posted on 2012-04-11
2
1,216 Views
Last Modified: 2012-08-21
Hi,

We have a file server with more than 1000 folders and we want to generate a report from the event ID 4670:

Who changed the permission
Who changed the ownership
To Whom was the permission was given
To Whom was the ownership was given
Who took ownership
What permission was change
Compare the new and old permission

Is there a script  that can handle this? I've seen a 3rd party application named SecReport anyone knows a free application as an alternative which can provide a human-readable reports that allow for easy identification of users and groups that have various levels of access to file/folders.
0
Comment
Question by:jayrbarrios
2 Comments
 
LVL 17

Accepted Solution

by:
Anuroopsundd earned 500 total points
ID: 37836139
0
 
LVL 1

Author Comment

by:jayrbarrios
ID: 37836271
Thanks for the info, I tried the tool but it only gives me a general report, when I changed the permission from Read/Execute to Modify it will just give me this info:

[4/12/2012 2:44:03 PM] CHANGED->\\WS08MDT01\Share\Department 3

I'm looking for something that can analyze the logs even after the event has taken placed.
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter (https://twitter.com/taviso/status/834900838837411840) that massive stores of data have been leaked by CloudFlare, a company that provide…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question