operationsIT
asked on
Is there a way to track files copied from file server
Hello EE,
I have a very unique issue. I have a situation where I have users who are accessing files on our file server.
1. I can see files open from manage.
My question is can I monitor if a user is copying files from the file server to their machine, USB, whatever media?
I have a very unique issue. I have a situation where I have users who are accessing files on our file server.
1. I can see files open from manage.
My question is can I monitor if a user is copying files from the file server to their machine, USB, whatever media?
You need to turn on Auditing. (both on the file server and workstation).
ASKER
Can you set Auditing via GPO that would roll out to everyone?
Yes, GPO can be used to change Auditing.
ASKER
My Files are stored on a NetAPP and what I'd like to accomplish is for a group of x number of people to track:
1. What files are touched
2. If any files are copied.
1. What files are touched
2. If any files are copied.
I would look at AD Audit Plus
http://www.manageengine.com/products/active-directory-audit/netapp-filer-auditing.html
A fully functional 30 day trial is available to Audit CIFS shares on the NetApp Filer, files copied to and from the NetApp CIFS Shares.
http://www.manageengine.com/products/active-directory-audit/netapp-filer-auditing.html
A fully functional 30 day trial is available to Audit CIFS shares on the NetApp Filer, files copied to and from the NetApp CIFS Shares.
ASKER
I know you can enable access policy in GPO and then on the object set users to audit, but is AD Audit Plus for the purpose of not having to sift through 1000 event logs after the fact?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.