Need solution to monitor who access, deletes and modifies file on a fileserver. Fileserver is 2008 currently and will be Windows 2012 R2 in future

Need solution to monitor who access, deletes and modifies file on a fileserver.  Fileserver is 2008 currently and will be Windows 2012 R2 in future
mortensencsCEOAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mortensencsCEOAuthor Commented:
Need solution to monitor who access, deletes and modifies file on a fileserver.  Fileserver is 2008 currently and will be Windows 2012 R2 in future.  Ideally would like to not spend over $500 dollars if possible.  Have Windows auditing turned on, but only showing one days of data.
0
rr2rCommented:
Are the logs rolling over? Sounds like you need a SIEM type of a software. We are using Logrhythm for that but the price point is quite higher... You can also look into ManageEngine software. I also tried that before and they should be less expensive. Splunk is free...
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mortensencsCEOAuthor Commented:
Ideally a 3rd party tool that logs shares, who accesses data and whether it was modified, deleted and or moved would be ideal  It appears the programs above only log the data and store the data.  The windows data is rather large and hard to parse though effectively.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

rr2rCommented:
Out of curiosity - is that a very busy server? If you up the size of the log file, can you hope to store as much data as you are required? These are the guidelines for the recommended log file sizes in Windows:

https://support.microsoft.com/en-us/kb/957662
0
mortensencsCEOAuthor Commented:
Most likely it's a low volume server.  It is a file share and print server.  The log files are pretty big for one day at a time so there may be more volume on it than I realize.

We have a series of folders that keeps disappearing forcing us to restore a backup.  That's our mystery we are trying to unravel.
0
rr2rCommented:
I see. It could also be related to what you are auditing - not all of those events are all that useful, and usually a single user operation actually creates multiple events in the logs.

I could also suggest this software - I have trialed some of their software as well, and currently use some of the free tools they offer. You might be able to solve your problem with the 20 day trial as well: http://www.netwrix.com/file_server_reporting.html
0
mortensencsCEOAuthor Commented:
I think that ManageEngine ADAudit will do what I need.  Thank you for your help :)
0
rr2rCommented:
Good Luck!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.