jayrbarrios
asked on
Event 4670: Files/Folder Audit Permission Reporting
Hi,
We have a file server with more than 1000 folders and we want to generate a report from the event ID 4670:
Who changed the permission
Who changed the ownership
To Whom was the permission was given
To Whom was the ownership was given
Who took ownership
What permission was change
Compare the new and old permission
Is there a script that can handle this? I've seen a 3rd party application named SecReport anyone knows a free application as an alternative which can provide a human-readable reports that allow for easy identification of users and groups that have various levels of access to file/folders.
We have a file server with more than 1000 folders and we want to generate a report from the event ID 4670:
Who changed the permission
Who changed the ownership
To Whom was the permission was given
To Whom was the ownership was given
Who took ownership
What permission was change
Compare the new and old permission
Is there a script that can handle this? I've seen a 3rd party application named SecReport anyone knows a free application as an alternative which can provide a human-readable reports that allow for easy identification of users and groups that have various levels of access to file/folders.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
[4/12/2012 2:44:03 PM] CHANGED->\\WS08MDT01\Share
I'm looking for something that can analyze the logs even after the event has taken placed.