Questions

Auditing file server

Tags:
+
0 Votes
Locked

Auditing file server

Gr@ndcri
I need to audit users access, files and folders on my file server. Can someone suggest me some auditing software for Windows 2003 server.

Thanks for you r Help

GC
  • +
    0 Votes
    wendy

    Varonis DatAdvantage provides real-time audit information for file servers, with no performance impact.

    www.varonis.com/products

    Cheers,
    Wendy Yale, Varonis

    +
    0 Votes
    Harold123

    We wound up looking at netwrix first because the product is free, but it turned out to be very effective and easy to use as well, so I would definitely recommend it. The automated E-mails report on all the changes made to our file server s, making it easy to catch unintentional (or not) unauthorized activity. We also send the reports directly to our SOX compliance auditors for easy proof of adherence.

    +
    0 Votes
    ITsteve13

    I hope you found a solution to your file server auditing needs. There are several products on the market that can address your concerns, and I recommend taking a look at NetWrix File Server Change Reporter, which has both freeware and commercial editions. The free File Server Change Reporter will send daily reports about all changes to the file servers for your review, including changes made to files, folders, shares, and permissions with previous and new values of certain configuration values. Additionally, the commercial version provides information about who made such changes and when they occurred, including detailed information about permission changes.
    I hope this helps and please feel free to visit http://www.netwrix.com/file_server_auditing_change_reporting_freeware.html for additional information on the product. For the sake of completeness and honesty, the competitive products are ScriptLogic File System Auditor, Quest Change Auditor (formerly NetPro Change Auditor), and Tripwire. Check out all of them if you want to make a wise decision.
    Thanks,
    Stephen Schimmel
    Product Manager
    NetWrix Corporation
    www.netwrix.com

    +
    0 Votes
    mafergus

    I wonder if I shoulld wait til 2012 to reply fully to this post?

    +
    0 Votes
    trantanthoai

    Hi All.
    I am new comer. I'm from Viet Nam. I read your concern. I have a suggest. You can try!
    1. You can use script follow: cscript.vbs at link: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=0ad33a24-0616-473c-b103-c35bc2820bda&DisplayLang=en
    2. After download file XCacls_Installer.exe and install this file. It will extract to file xcacls.vbs.
    3. Change the default scripting engine from Wscript to Cscript (The Xcacls.vbs script works best in Cscript). To do this, type the following at a command prompt, and then press ENTER:

    Cscript.exe /h:cscript

    4. Enter follow command-line:
    C:\>cscript xcacls.vbs "path directory or filename" /S /F /T >"filename.txt"
    Note: save xcacls.vbs file at currency root directory.
    Explain:
    filename [Required] If used alone, it Displays ACLs.
    (Filename can be a filename, directory name or
    wildcard characters and can include the entire
    path. If path is missing, its assumed to be
    under the current directory.
    Notes:
    - Put filename in quotes if it has spaces or
    special characters such as &, $, #, etc.
    - If Filename is a directory, all files and
    sub directories under it will NOT be changed
    unless the /F or /S is present.

    /F [Used with Directory or Wildcard] This will change all
    files under the inputed directory but will NOT
    traverse sub directories unless /T is also present.
    If filename is a directory, and /F is not used, no
    files will be touched.

    /S [Used with Directory or Wildcard] This will change all
    sub folders under the inputed directory but will NOT
    traverse sub directories unless /T is also present.
    If filename is a directory, and /S is not used, no
    sub directories will be touched.

    /T [Used only with a Directory] Traverses each
    subdirectory and makes the same changes.
    This switch will traverse directories only if the
    filename is a directory or is using wildcards.

    Hope that helps

    Email:trantanthoai@gmail.com
    www.thp.com.vn

  • +
    0 Votes
    wendy

    Varonis DatAdvantage provides real-time audit information for file servers, with no performance impact.

    www.varonis.com/products

    Cheers,
    Wendy Yale, Varonis

    +
    0 Votes
    Harold123

    We wound up looking at netwrix first because the product is free, but it turned out to be very effective and easy to use as well, so I would definitely recommend it. The automated E-mails report on all the changes made to our file server s, making it easy to catch unintentional (or not) unauthorized activity. We also send the reports directly to our SOX compliance auditors for easy proof of adherence.

    +
    0 Votes
    ITsteve13

    I hope you found a solution to your file server auditing needs. There are several products on the market that can address your concerns, and I recommend taking a look at NetWrix File Server Change Reporter, which has both freeware and commercial editions. The free File Server Change Reporter will send daily reports about all changes to the file servers for your review, including changes made to files, folders, shares, and permissions with previous and new values of certain configuration values. Additionally, the commercial version provides information about who made such changes and when they occurred, including detailed information about permission changes.
    I hope this helps and please feel free to visit http://www.netwrix.com/file_server_auditing_change_reporting_freeware.html for additional information on the product. For the sake of completeness and honesty, the competitive products are ScriptLogic File System Auditor, Quest Change Auditor (formerly NetPro Change Auditor), and Tripwire. Check out all of them if you want to make a wise decision.
    Thanks,
    Stephen Schimmel
    Product Manager
    NetWrix Corporation
    www.netwrix.com

    +
    0 Votes
    mafergus

    I wonder if I shoulld wait til 2012 to reply fully to this post?

    +
    0 Votes
    trantanthoai

    Hi All.
    I am new comer. I'm from Viet Nam. I read your concern. I have a suggest. You can try!
    1. You can use script follow: cscript.vbs at link: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=0ad33a24-0616-473c-b103-c35bc2820bda&DisplayLang=en
    2. After download file XCacls_Installer.exe and install this file. It will extract to file xcacls.vbs.
    3. Change the default scripting engine from Wscript to Cscript (The Xcacls.vbs script works best in Cscript). To do this, type the following at a command prompt, and then press ENTER:

    Cscript.exe /h:cscript

    4. Enter follow command-line:
    C:\>cscript xcacls.vbs "path directory or filename" /S /F /T >"filename.txt"
    Note: save xcacls.vbs file at currency root directory.
    Explain:
    filename [Required] If used alone, it Displays ACLs.
    (Filename can be a filename, directory name or
    wildcard characters and can include the entire
    path. If path is missing, its assumed to be
    under the current directory.
    Notes:
    - Put filename in quotes if it has spaces or
    special characters such as &, $, #, etc.
    - If Filename is a directory, all files and
    sub directories under it will NOT be changed
    unless the /F or /S is present.

    /F [Used with Directory or Wildcard] This will change all
    files under the inputed directory but will NOT
    traverse sub directories unless /T is also present.
    If filename is a directory, and /F is not used, no
    files will be touched.

    /S [Used with Directory or Wildcard] This will change all
    sub folders under the inputed directory but will NOT
    traverse sub directories unless /T is also present.
    If filename is a directory, and /S is not used, no
    sub directories will be touched.

    /T [Used only with a Directory] Traverses each
    subdirectory and makes the same changes.
    This switch will traverse directories only if the
    filename is a directory or is using wildcards.

    Hope that helps

    Email:trantanthoai@gmail.com
    www.thp.com.vn