Logging access on shared folder

[newmanyoung]

Hi all,

I need to log user access (read, write, modify, etc) on a shared folder on my network. I assume it would be an auditing events on the folder properties. Not sure what I need to add. Can it pipe it to a .txt file? Is there any policy to would also do the same task? TIA

Newman

 

[kmkeshav]

This URL will guide you in this:

http://support.microsoft.com/kb/301640/EN-US/

The activities will be logged as events and you could use the event viewer to see them.


-Keshav / IT Consultant

 

[newmanyoung]

I've already did that part of auditing setup. But I still only get basic logon/logoff in security events. I have also enable the audit object access setting in the Audit policy. Thanks for the help

Newman

 

[Seaspray0]

Good, you've enabled the audit policy for object access (preferably the local computer policy holding the share).

Now, goto the folder that is being shared, right click, properties, security tab, advanced button, auditing tab.

add a group/user to the list and define what actions you wish audited for the group/user.

The audit entries can be seen by the event viewer, security log.

Start, Help. You'll be surprised what's there. A+/MCP/MCSE/MCDBA

 

[newmanyoung]

Looks like the log file is going to be pretty big since I am trying to log all file activities on the domain. Is there any 3rd party software that will log the same info? TIA

 

[newmanyoung]

Looks like the security log is only logging items my ID is accessing, but I include all domain users to audit in the folder properties? Any idea why? I am remoting into my server and using my user account with domain admin rights to configure auditing. Will this need to be initiated with an administrator account? TIA