Tracking/Auditing file access and changes in server 2008

Posted on 2012-09-20
Last Modified: 2012-09-28
I have set up auditing on a folder on a Windows 2008 server. I see the events in the security event log. My question is can I set up a custom event item that just has the file access events without all the other security events? Or is there a 3rd party application that can better assist me in tracking and reporting file access and changes on this server.

We need to know:
Who accessed a file
When it was accessed
What canges were made if any
Question by:USGLOBAL
    LVL 8

    Expert Comment


    Author Comment

    Looks nice but a minimum of 500 licenses.... Hmmm, pass. Appreciate the input though!

    We just need to monitor one stand alone server and the file access.
    LVL 8

    Expert Comment

    Ouch, must be expensive.  

    I don't think you can create custom events, but petri does a great job of explaining how to customize your event viewer views:

    This link describes more filtering options (it says it's for Vista, but it will work for server 2008):

    These should make it easier to find the needle in your haystack.
    LVL 4

    Accepted Solution

    FileAudit will do the job for about $200 for one server.

    This software solution allows you to:
    - Monitor access (or access attempts) to files and folders stored on Windows systems
    - Automatically archive all file access events occurring on one or several Windows systems for future reference
    - Display file and folder access history in a printable report that can be scheduled to run automatically
    - Export file and folder access history data to Excel for in-depth analysis and control

    Detailed info and trial:

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now