I have a windows 8.1 system storing backup images on my network.
Some one or something is resetting the permissions on my backup share folder. Additionally, the user account that is used for authentication to the backup share is getting locked out the second I re-enable the account.
I need to figure out the best way to monitor the permission changes and capture the IP address and the user name making the changes. I know I can use local policy to audit, but is there something better. This windows 8.1 is part of a windows 2008R2 domain.
Thanks very much fro the help!!!