Event id when a user is given permission to access a folder

[kk5]

When a user is given permission to access a folder, what is the event id that writes to the event log.

we have a folder on one of our windows 2003 server and for some reason, users are bieng added directly to the folder not to the security group. is there a way to find out who is adding the users to the folder.

Thanks for your help

 

[Fatboy0341]

Security Event ID:

608 means "Success Audit User Right Assigned"
609 means "Success Audit User Right Removed"

Not sure if this applies directly to a user account or to a folder/directory/file.

Still looking for a definitive answer...






"He who laughs last probably made a backup. He who laughs loudest probably hasn't checked his backups in a while."