Discussion Locked

ntfs auditing

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I turned ntfs auditing on for a few files. Where do i see the results? In event viewer, a text file, etc...

5 replies

by alex

You will view results in Event viewer under Security. But realize you must have File and Object Access checked for Success and Failure Auditing in your policy. You find this setting in the User manager under Policies. Remember that checking Success Auditing for File and Object Access for commonly used files can fill that log up really really REALLY fast. You may want to increase your log file size also.

by estebandelatorre

Look in the event viewer under the security option. Be carefull because auditing eat disk space and your logs can increase very quickly and in security log does becomes full, nt won?t work until you empty it.

This discussion is closed to new replies.