File access on 2008 Server

Is there auditing to view folder and file access on a 2008 windows file server.  Or is this like 2003 and you have to turn on auditing?  Or is there any other way to view this.  Basically we had an admin that was recently let go and they were suspected of accessing CEOs shared folder on the network.  Any ideas?
Who is Participating?
Lee W, MVPTechnology and Business Process AdvisorCommented:
It's the same as it was in 2003 and the same as it is in 2012 - if you don't turn it on, you don't get that information.
Yes you need to enable auditing first via GPO

Enable Audit Policy

    1. Create a Group Policy Object and name it something to the effect of File Server Audit Policy

    2. Edit the GPO, browse to Computer Configuration\Windows Settings\Security Settings\Advanced Audit Policy Configuration\Audit Policies\

Taken from:

Once this is on there are some useful tools:
beepatAuthor Commented:
Yes I know that however was wondering g if there is anyway to trace without that being on
WEBINAR: 10 Easy Ways to Lose a Password

Join us on June 27th at 8 am PDT to learn about the methods that hackers use to lift real, working credentials from even the most security-savvy employees. We'll cover the importance of multi-factor authentication and how these solutions can better protect your business!

Not as far as i know. Not as far as accessing folders etc.

Someone may correct me?
Yes that is how i see it too Lee W
Seth SimmonsSr. Systems AdministratorCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.