Event 4670: Files/Folder Audit Permission Reporting

Hi,

We have a file server with more than 1000 folders and we want to generate a report from the event ID 4670:

Who changed the permission
Who changed the ownership
To Whom was the permission was given
To Whom was the ownership was given
Who took ownership
What permission was change
Compare the new and old permission

Is there a script  that can handle this? I've seen a 3rd party application named SecReport anyone knows a free application as an alternative which can provide a human-readable reports that allow for easy identification of users and groups that have various levels of access to file/folders.
LVL 1
jayrbarriosAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
jayrbarriosAuthor Commented:
Thanks for the info, I tried the tool but it only gives me a general report, when I changed the permission from Read/Execute to Modify it will just give me this info:

[4/12/2012 2:44:03 PM] CHANGED->\\WS08MDT01\Share\Department 3

I'm looking for something that can analyze the logs even after the event has taken placed.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.