Question

Locked

Cannot view object access events in security log

By fmuise ·
I am trying to Audit Success/Failure of opening a invoice.txt file on Server 2003. I have configured my Domain Policy to allow Audit Object access Success and Failure, also on the file it self I have set up the Audit options through the Security options and advanced tab for the correct user and groups. When I try to generate a event so I can confirm the audit is working I can't get n Object Access events to show up in the Event Log.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Domain Policy

by scott_heath In reply to Cannot view object access ...

Have you verified that the policy is being applied to the system in question? Use rsop.msc to make sure then let us know.

Regards,
Scott

http://scottisageek.spaces.live.com

Collapse -

rsop.msc

by fmuise In reply to Domain Policy

Thanks for the reply Scott,

rsop.msc is showing in the Local Policy that there is no Auditing for object access, where should I go from here?

Collapse -

GPO's

by scott_heath In reply to rsop.msc

Is this a new GPO you created? If the Computer object is in the "Computers" default container it will ignore the policy. Create a container for the objects and make sure the GPO can flow down to it, i.e. link it at the top level of the domain or to the OU with the computer objects in it.

You should be able to right click on objects in ADUC and choose the effective policy option to see what policies should be applied.

Regards,
Scott

http://scottisageek.spaces.live.com

Back to Networks Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums