Link to home
Start Free TrialLog in
Avatar of ferrarista
ferrarista

asked on

Question about setting up audit for specific folder

I need to setup auditing on a specific folder hosted on a Windows Server 2012.

I first setup auditing policy using GPO (within security policy), then I configured the audit settings on the required folder.

What I don't understand, is once I configure the policy, the server security log rapidly fills in with many events recording access to objects such as C:\Windows\System32\UIAutomationCoreRes.dll, and so on. Shouldn't that happen only after I configure audit setting on the required folder ?

Thanks!
ASKER CERTIFIED SOLUTION
Avatar of Naveen Sharma
Naveen Sharma

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Naveen Sharma
Naveen Sharma

Answered.