• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 103
  • Last Modified:

audit queries

dear gurus advise

for windows 2008 domain controller type network, how best we can audit our own network and get recommendation

any step by step tips guideline given
0
tmsa12
Asked:
tmsa12
  • 2
1 Solution
 
MaheshArchitectCommented:
Auditing is vast topic

generally auditing needs to be set in Default domain Controller Policy or separate policy that will apply to Domain Controllers OU
http://blog.pluralsight.com/windows-server-2008-auditing-active-directory
http://www.manageengine.com/products/active-directory-audit/help/getting-started/manual-configuration-dc-auditing.html

Also for file servers auditing you must put file server in separate OU \ OR use GPO security filtering to apply GPO only to file server computer object
In that GPO you must enable Audit object access for success and failures and then you need to set auditing on shared folders properties\security \advanced tab\auditing and there you need to add all respective users for which you wanted to audit access

Check below articles for more info
http://social.technet.microsoft.com/Forums/windowsserver/en-US/da689e43-d51d-4005-bc48-26d3c387e859/auditing-on-file-server?forum=winserverfiles
http://blogs.technet.com/b/mspfe/archive/2013/08/27/auditing-file-access-on-file-servers.aspx

Note that all auditing activities records logs in security event logs so ensure that you will ensure security event log size on servers

Mahesh.
0
 
tmsa12Author Commented:
dear gurus highly appreciate

in fact only domain admin, users audit required, folder/file sharing not require

advise any free tools to audit windows 2008 r2 enviornment and can it apply or install on master domain controller dc

regards
saleem
0
 
MaheshArchitectCommented:
Microsoft provides the above way to set auditing on your Domain controllers

When you set auditing polices in Default Domain Controller Policy, it will apply to Domain Controllers only

If you are looking for 3rd party tools, they are not free and you can check trial version of Ad Audit Plus from Manage engine, its really good tool and if you found OK, you can buy it

Mahesh
0
 
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now