Windows Server 2008 File copy auditing
Posted on 2012-12-28
I'm looking for a way, either natively or through 3rd party tools, to monitor when a file is copied from a share on my windows 2008 server share to another destination.
My environment is a virtual desktop infrastructure on which I have a Windows 2008 R2 DC/File server with Windows Shares. Also on the VDI are virtual Windows 7 computers which users log into via RDP through a gateway-to-gateway VPN tunnel. All files are supposed to remain on the VDI but I need to know when a user copies files from the shares to another computer (either one of the virtual machines or, more importantly, a local computer from which they are working.
After some Googling I'm not sure if this is even possible - hope someone can help.
Thanks in advance!