Discussion Locked

Files & Folders auditing

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How exactly can I setup to audit files & folders on several user groups? I need to know which users are accessing a specific folder on one of our shared folder on our NT Server. Can auditing be performed on a user running Win9x machine?

5 replies

by ruturaj

Here Goes It's a 2 step process:
1.) First off get into User Manager for Domains on the NT Server (or User Manager if the machine You want to audit is a stand alone), from the policies menu select audit then select audit these events & tick the check box for failure & success of file & object access. close out of this window
2.) Open up my computer or explorer go to the folder you want to audit right click it select properties select the security tab click the auditing button click add selectthe groups you want to audit then select the events you want to audit write, read ....
To verify you can view the security evt log.

This will work for users coming from any platform (Win95/98/NT) provided the directory you are auditing is on theNT Server with NTFS

by tamj123

To do this first you have to enable the Audit. To do that open user manager for domain the click on Polices\Audit then select "access files and Object".
Second, Right click on the folder you shared then selected properties and then choose Auditing.click on add, select the group and users you want to audit and what you want to audit.

by daniely

To add to my question:

To test it out, I've setup myself as one of the group to be audited. The auditing was set to write fail and success. I tried to create a file on the folder and then check the Event Viewer Security log but there is no status of me accessing the folder.

This discussion is closed to new replies.