General discussion
June 25, 2003 at 05:56 AM
techie401

Security Log Question

by techie401 . Updated 23 years, 3 months ago

Hello all,

My employer is looking for a way to track file accesses in Windows 2K. I have setup the auditing so that the files are tracked and that works. The problem is these files are modified several times a minute and I am not only getting the audit message that the file has been accessed but also many that say ?handle closed? the event ID is 562. Is there any way to limit this type of message or eliminate them? We only need to the file access audit. Any thoughts or ideas?

This discussion is locked

All Comments