Hello all,
My employer is looking for a way to track file accesses in Windows 2K. I have setup the auditing so that the files are tracked and that works. The problem is these files are modified several times a minute and I am not only getting the audit message that the file has been accessed but also many that say ?handle closed? the event ID is 562. Is there any way to limit this type of message or eliminate them? We only need to the file access audit. Any thoughts or ideas?