Solved

Trouble Object-Access-Auditing on Win 2008 R2 Server

Posted on 2013-01-22
1
385 Views
Last Modified: 2013-03-27
I am running a Windows 2008 R2 server.  My client PC is running Windows 7 Professional  SP 1

I am trying to set up object-access auditing for a specific folder on the server.

I set up auditing as follows:  Default Domain Policy, Computer Configuration, Policies, Windows Settings, Security Settings, Local Policies, Audit Policy, Audit Object Access, Define these policy settings, checked success.

No other group policies have anything defined for object-access-auditing.

When I run rsop on my computer Audit Object Access is set to successful.

I then went to the folder on the server from my computer.

Right Clicked, Properties,  Security , Advanced, Auditing, Add, Everyone, Full Control (All Successful)

I checked subfolders and files inside the audited folder and they all have this same auditing setup.

My understanding is that when I do anything in this folder it will show up in the Security log in the event viewer on the server.

However, when I do this nothing shows up there !! Did I set this up correctly?  Am I looking in the right log?  What codes should I be looking for?  Can I filter the log for my user account?
0
Comment
Question by:zabac
1 Comment
 
LVL 16

Accepted Solution

by:
choward16980 earned 500 total points
ID: 38806338
Just out of curiosity, had you tried setting up the "Global Object Access Auditing"?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My previous article  (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html)detailed one possible method to get SCCM 2007 installed an…
On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now