Folder/file access audit

I would like to audit a specific folder and its contents for user access.  I have turned on "audit object access" and then turned auditing on at the folder but my security event log seems to get filled with a ton of other events.  How can I narrow down the events that get logged and only log the access of the contents of the single folder?
NytroZAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
Are you using Windows 2003 or 2008 and higher?  If you are on 2008 you can use the Advanced Audit Policies,

See screnshot below, notice how you can get more granular

1
You can't get more granular on 2003/2000

Thanks

Mike
0
SandeshdubeySenior Server EngineerCommented:
I would also recommend to enable minimal audit setting on files and folder(like delete operation) as this will create strom of events. Auditing can generate a large amount of data.Because the security log is limited in size, select the files and folders to be audited carefully. Also, consider the amount of disk space that you want to devote to the security log. The maximum size for the security log is defined in Event Viewer.

Regarding Win2008 auditing see this similar thread,you will see the actuall subcategories of the granular auditing:http://social.technet.microsoft.com/Forums/windowsserver/en-US/4614f842-db36-4c75-9bc4-3854491eaf62/server-2008r2-file-system-auditing?forum=winservergen
 
Hope this helps
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Security

From novice to tech pro — start learning today.