Solved

Trouble Object-Access-Auditing on Win 2008 R2 Server

Posted on 2013-01-22
1
389 Views
Last Modified: 2013-03-27
I am running a Windows 2008 R2 server.  My client PC is running Windows 7 Professional  SP 1

I am trying to set up object-access auditing for a specific folder on the server.

I set up auditing as follows:  Default Domain Policy, Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, Audit Policy, Audit Object Access, Define these policy settings, checked success.

No other group policies have anything defined for object-access-auditing.

When I run rsop on my computer Audit Object Access is set to successful.

I then went to the folder on the server from my computer.

Right Clicked, Properties,  Security , Advanced, Auditing, Add, Everyone, Full Control (All Successful)

I checked subfolders and files inside the audited folder and they all have this same auditing setup.

My understanding is that when I do anything in this folder it will show up in the Security log in the event viewer on the server.

However, when I do this nothing shows up there !! Did I set this up correctly?  Am I looking in the right log?  What codes should I be looking for?  Can I filter the log for my user account?
0
Comment
Question by:zabac
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38806338
Just out of curiosity, had you tried setting up the "Global Object Access Auditing"?
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
Welcome to my series of short tips on migrations. Whilst based on Microsoft migrations the same principles can be applied to any type of migration. My first tip Migration Tip #1 – Source Server Health can be found here: http://www.experts-exchang…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question