Desktop

Ask something
Discussion Locked

Auditing of Users

0 helpful
1 reply

by sister-inlaw

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have an NT server right now, I need to find a way to audit usage on the server- specifically the addition and deletion of files, the names, and sizes of each. Example-someone had a folder deleted but didn't delete it themselves, I'd like to go and find out 'who' actually deleted it. The auditing options doesn't really seem to get that specific---I have an event log archiver and analyser, but the actual audit needs to be there.....does anyone know how to get that specific on NT or know of any cheap 3rd party software that manages such information?
thanks in advance

1 reply

by dmiles

This may be accomplished in the configuration of NT security
No FAT or HPFS drives allowed
First you must use User Manager to tur on the appropiate type of auditing for the file or files you wish to monitor
Then use File Manager to turn on the appropiate typ auditing of file or files
Use Event Viewer to examine the security log on which Windows NT stores auditing events
Reference the following site article for setup
Exploring Windows NT/Using auditing to track file activity
http://www.elementjournals.com/9404/ewn40028.htm

This discussion is closed to new replies.