Link to home
Start Free TrialLog in
Avatar of NytroZ
NytroZFlag for United States of America

asked on

Folder/file access audit

I would like to audit a specific folder and its contents for user access.  I have turned on "audit object access" and then turned auditing on at the folder but my security event log seems to get filled with a ton of other events.  How can I narrow down the events that get logged and only log the access of the contents of the single folder?
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Are you using Windows 2003 or 2008 and higher?  If you are on 2008 you can use the Advanced Audit Policies,

See screnshot below, notice how you can get more granular

User generated image
You can't get more granular on 2003/2000

Thanks

Mike
ASKER CERTIFIED SOLUTION
Avatar of Sandesh Dubey
Sandesh Dubey
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial