Auditing what is it capable of?

[TechCarnivore]

I'm trying to keep a record of:
User log on/log off
file creation, deletion, moves, etc
all with time stamps if possible.

Will auditing do this? if so can someone provide a how to or URL?
Would this also work for RDP or VPN connections?

 

[itsp1965]

Applying audit settings will generate events in the system event log (local/domain security policy). If you need to monitor file changes, you will need to audit at the drive/folder level (in advanced options under the security tab)
A simple google search will yield the info you need regarding event logging.
Try this as a start;

http://www.windowsecurity.com/articles/Auditing-Users-Groups-Windows-Security-Log.html

HTH

 

[itsp1965]

Sorry I meant security event log