Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 779
  • Last Modified:

Tracking/Auditing file access and changes in server 2008

I have set up auditing on a folder on a Windows 2008 server. I see the events in the security event log. My question is can I set up a custom event item that just has the file access events without all the other security events? Or is there a 3rd party application that can better assist me in tracking and reporting file access and changes on this server.

We need to know:
Who accessed a file
When it was accessed
What canges were made if any
0
USGLOBAL
Asked:
USGLOBAL
  • 2
1 Solution
 
npinfotechCommented:
0
 
USGLOBALAuthor Commented:
Looks nice but a minimum of 500 licenses.... Hmmm, pass. Appreciate the input though!

We just need to monitor one stand alone server and the file access.
0
 
npinfotechCommented:
Ouch, must be expensive.  

I don't think you can create custom events, but petri does a great job of explaining how to customize your event viewer views: http://www.petri.co.il/custom-event-views-in-windows-server-2008.htm.

This link describes more filtering options (it says it's for Vista, but it will work for server 2008):
http://www.petri.co.il/filtering-and-custom-views-in-vista-event-viewer.htm.

These should make it easier to find the needle in your haystack.
0
 
JustMy2CentsCommented:
FileAudit will do the job for about $200 for one server.

This software solution allows you to:
- Monitor access (or access attempts) to files and folders stored on Windows systems
- Automatically archive all file access events occurring on one or several Windows systems for future reference
- Display file and folder access history in a printable report that can be scheduled to run automatically
- Export file and folder access history data to Excel for in-depth analysis and control

Detailed info and trial:
http://www.isdecisions.com/products/fileaudit/
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now