Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 62
  • Last Modified:

User Accounts Audit - AD users

Hi all,

I am trying to develop a report to includes win2012R2 AD user accounts successful logins in and out times daily report - as well as Auditing shared folders access to know who did read , write , deleted any file or folder within a specific Shared drive.

I am sure some came across a similar requirement, looking forward hearing from you all.

Cheers
Dash
1
Dash Amr
Asked:
Dash Amr
2 Solutions
 
Mohammed KhawajaManager - Infrastructure: Information TechnologyCommented:
What you are trying to do has been done and you can download utilities that could do that.  Have you looked at Netwrix tools where they have some paid as well as some freeware tools to do what you are trying to achieve.

My other suggestion would be turn on all the loggings and then use a tool such as Splunk where you feed Splunk the Windows logs and there are built-in apps/module for standard reports.  

If you wish to write your own then use PowerShell and note that you would have to consolidate many logs from numerous sources/servers which may not be the most optimum/easy way of doing it.
1
 
XcelogiXCommented:
It takes a little bit of setting up, but you can configure Account Logon auditing in a GPO scoped to your Domain Controllers, then forward the Security logs from the DCs to a single server where you can review & export the logs later, as you desire.

The file server can be configured either locally or by GPO to audit File System Access, or use the Advanced Auditing feature to specify what it is you want to record. Don't forget once you do that, you also have to go into the Permissions settings for the folder you want to monitor and add Auditing entries.
1

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Tackle projects and never again get stuck behind a technical roadblock.
Join Now