Solved

Trouble Object-Access-Auditing on Win 2008 R2 Server

Posted on 2013-01-22
1
383 Views
Last Modified: 2013-03-27
I am running a Windows 2008 R2 server.  My client PC is running Windows 7 Professional  SP 1

I am trying to set up object-access auditing for a specific folder on the server.

I set up auditing as follows:  Default Domain Policy, Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, Audit Policy, Audit Object Access, Define these policy settings, checked success.

No other group policies have anything defined for object-access-auditing.

When I run rsop on my computer Audit Object Access is set to successful.

I then went to the folder on the server from my computer.

Right Clicked, Properties,  Security , Advanced, Auditing, Add, Everyone, Full Control (All Successful)

I checked subfolders and files inside the audited folder and they all have this same auditing setup.

My understanding is that when I do anything in this folder it will show up in the Security log in the event viewer on the server.

However, when I do this nothing shows up there !! Did I set this up correctly?  Am I looking in the right log?  What codes should I be looking for?  Can I filter the log for my user account?
0
Comment
Question by:zabac
1 Comment
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38806338
Just out of curiosity, had you tried setting up the "Global Object Access Auditing"?
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

##the calculator has been updated to version 1.6 please download the use the updated version## Hi there, After the previous post of the original version of the calculator here : http://www.experts-exchange.com/articles/OS/Microsoft_Operatin…
The question has been asked on multiple occasions as to how best to do printing in a remote desktop or terminal services environment.   It seems that this particular question has plagued several people and most especially as Terminal Services, as…
This video discusses moving either the default database or any database to a new volume.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now