Link to home
Start Free TrialLog in
Avatar of jayrbarrios
jayrbarriosFlag for Singapore

asked on

Event 4670: Files/Folder Audit Permission Reporting

Hi,

We have a file server with more than 1000 folders and we want to generate a report from the event ID 4670:

Who changed the permission
Who changed the ownership
To Whom was the permission was given
To Whom was the ownership was given
Who took ownership
What permission was change
Compare the new and old permission

Is there a script  that can handle this? I've seen a 3rd party application named SecReport anyone knows a free application as an alternative which can provide a human-readable reports that allow for easy identification of users and groups that have various levels of access to file/folders.
ASKER CERTIFIED SOLUTION
Avatar of Anuroopsundd
Anuroopsundd
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jayrbarrios

ASKER

Thanks for the info, I tried the tool but it only gives me a general report, when I changed the permission from Read/Execute to Modify it will just give me this info:

[4/12/2012 2:44:03 PM] CHANGED->\\WS08MDT01\Share\Department 3

I'm looking for something that can analyze the logs even after the event has taken placed.