• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 362
  • Last Modified:

Windows File server access auditong ?

Hi People,

How can I view or generate the log of who has accessed the sensitive files in certain folders in my file server ?

The File server is Windows Server 2012 R2 and I have just enabled the FSRM features after I have done the final file copy of user Home drives last month.

Is it possible to know the access last week or do I have to enable certain feature to get the point forward logging ?
0
Senior IT System Engineer
Asked:
Senior IT System Engineer
  • 3
  • 2
2 Solutions
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
You need to enable auditing and then you move forward from there, it's not something you can see the past for when you weren't tracking it.

This Technet article contains many details on enabling

Auditing File Access on File Servers
http://blogs.technet.com/b/mspfe/archive/2013/08/27/auditing-file-access-on-file-servers.aspx
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
ok, so once enabled, where can I view the access log ?
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
In the Security Event Logs.  Applying a filter for your desired information is going to make it easiest to view.
0
 
Senior IT System EngineerIT ProfessionalAuthor Commented:
Cool, so in this case, when someone copied a directory to another shared drive, is that going to be logged ?
0
 
Lee W, MVPTechnology and Business Process AdvisorCommented:
It depends on the criteria for auditing that you selected.  (DO MAKE SURE you have sufficiently large log settings - overwrite after x size or days and you could lose the information.  I also once had a client with this enabled and a setting to keep an archive of the logs - they filled his C: drive in weeks because he wasn't taking steps to offload the archived logs!
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now