General discussion

Locked

Logging changes to files

By joshhansen ·
Is there a way that the event viewer can log who made changes and when to any file on an NT server?

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Logging changes to files

by joshhansen In reply to Logging changes to files

Point value changed by question poster.

Collapse -

Logging changes to files

by Smurfman In reply to Logging changes to files

The Partition must be NTFS for the security tab to show.

Goto the folder you wish to monitor, or the file(s) and right click on it, choose properties, and then goto the security tab. On the security tab, click Audit... and it is in here that youcan specify, success and failure audits on the file(s). In here click add.. to even watch a particular user or group of users. and then click on the desired settings for the audit.

Good Luck.
Smurfman

Collapse -

Logging changes to files

by joshhansen In reply to Logging changes to files

Poster rated this answer

Collapse -

Logging changes to files

by madzumo In reply to Logging changes to files

Smurfman is right. However, the detailed information on file security is mostly encrypted and hard to read using Event Viewer. I suggest using a consolidation auditing tool like axent or ltauditor. you can find it @ www.bluelance.com.
That's helped me out a bunch!

good luck
jonathan

Collapse -

Logging changes to files

by joshhansen In reply to Logging changes to files

Poster rated this answer

Collapse -

Logging changes to files

by joshhansen In reply to Logging changes to files

This question was closed by the author

Back to Windows Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums