Link to home
Start Free TrialLog in
Avatar of Ezra Shiram
Ezra ShiramFlag for United States of America

asked on

Windows Server 2008 R2 Auditing

Hello,
Oftentimes, there are folders or files that get "deleted". What usually happens is a user will move the folder or file to another folder by mistake. How do I set up Auditing to track when a folder/file is moved, by whom, and its new location? Is that possible with Auditing? The environment is a Windows Server 2008 R2 acting as DC and FS. PCs are joined via domain.

Thank You!
ASKER CERTIFIED SOLUTION
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Ezra Shiram

ASKER

thank you!
You should not configure that in the default domain policy - it will apply to any machine. Simply apply it to machines you want to audit directly or setup a policy that applies to those machines. Additionally, that link is outdated and is not the recommended procedure for 2008 R2 since R2 knows advanced auditing, see https://technet.microsoft.com/en-us/library/dd408940(v=ws.10).aspx It will give you more control on what is logged and keep the logs smaller.