Solved

User Accounts Audit - AD users

Posted on 2016-07-19
3
57 Views
1 Endorsement
Last Modified: 2016-09-21
Hi all,

I am trying to develop a report to includes win2012R2 AD user accounts successful logins in and out times daily report - as well as Auditing shared folders access to know who did read , write , deleted any file or folder within a specific Shared drive.

I am sure some came across a similar requirement, looking forward hearing from you all.

Cheers
Dash
1
Comment
Question by:Dash Amr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 25

Accepted Solution

by:
Mohammed Khawaja earned 250 total points
ID: 41721548
What you are trying to do has been done and you can download utilities that could do that.  Have you looked at Netwrix tools where they have some paid as well as some freeware tools to do what you are trying to achieve.

My other suggestion would be turn on all the loggings and then use a tool such as Splunk where you feed Splunk the Windows logs and there are built-in apps/module for standard reports.  

If you wish to write your own then use PowerShell and note that you would have to consolidate many logs from numerous sources/servers which may not be the most optimum/easy way of doing it.
1
 
LVL 1

Assisted Solution

by:XcelogiX
XcelogiX earned 250 total points
ID: 41722183
It takes a little bit of setting up, but you can configure Account Logon auditing in a GPO scoped to your Domain Controllers, then forward the Security logs from the DCs to a single server where you can review & export the logs later, as you desire.

The file server can be configured either locally or by GPO to audit File System Access, or use the Advanced Auditing feature to specify what it is you want to record. Don't forget once you do that, you also have to go into the Permissions settings for the folder you want to monitor and add Auditing entries.
1

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question