We help IT Professionals succeed at work.

Powershell script for Auditing

alanlam123
alanlam123 asked
on
5 Comments
1 Solution
85 Views
Last Modified: 2017-10-31
Hi

I suspect someone have transfer the file from his local machine.

We don’t have Audit trail turn on.

Question what is the powershell script to trace this?

Thank
Comment
Watch Question

View Solution Only

David Johnson, CDSimple Geek from the '70s
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
You can't audit events in the past before auditing was enabled. If you close the barn door after the horse has gone, the horse is still gone.
AlanConsultant
CERTIFIED EXPERT

Commented:
And therefore, turn on auditing now.

At least you will be able to check if it happens again.

Alan.
alanlam123

Author

Commented:
What is the step to turn on the audit policy in AD
Consultant
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
alanlam123

Author

Commented:
Tks for the help