?
Solved

Trouble Object-Access-Auditing on Win 2008 R2 Server

Posted on 2013-01-22
1
Medium Priority
?
400 Views
Last Modified: 2013-03-27
I am running a Windows 2008 R2 server.  My client PC is running Windows 7 Professional  SP 1

I am trying to set up object-access auditing for a specific folder on the server.

I set up auditing as follows:  Default Domain Policy, Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, Audit Policy, Audit Object Access, Define these policy settings, checked success.

No other group policies have anything defined for object-access-auditing.

When I run rsop on my computer Audit Object Access is set to successful.

I then went to the folder on the server from my computer.

Right Clicked, Properties,  Security , Advanced, Auditing, Add, Everyone, Full Control (All Successful)

I checked subfolders and files inside the audited folder and they all have this same auditing setup.

My understanding is that when I do anything in this folder it will show up in the Security log in the event viewer on the server.

However, when I do this nothing shows up there !! Did I set this up correctly?  Am I looking in the right log?  What codes should I be looking for?  Can I filter the log for my user account?
0
Comment
Question by:zabac
1 Comment
 
LVL 16

Accepted Solution

by:
Chris H earned 2000 total points
ID: 38806338
Just out of curiosity, had you tried setting up the "Global Object Access Auditing"?
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
When you have multiple client accounts to manage, it often feels like there aren’t enough hours in the day. With too many applications to juggle, you can’t focus on your clients, much less your growing to-do list. But that doesn’t have to be the cas…
Watch the working video to know how to import Outlook PST/OST files to Amazon WorkMail. Kernel released this tool which is very easy to use and migrate single or multiple PST and OST files to Amazon WorkMail. To know more about Kernel Import PST to …

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question