Tracking

[Stevenson]

Hi Guys,

Can we find out who renamed or deleted a file in the Win NT4.0 - server
the server has around 300 users who log in daily
the Server has Citrix Metaframe installed on it
which Provides Remote Logins to the users
the thing is we can find out who uses which application
but can't make out what changes somebody does to a folder
or a file how can we keep track of this

thanks in advance
Steve

 

[PeteRobi]

Hi Steve,
You could use NT auditing for this. You can enable it by running up User manager, selecting the server you are on, clicking on Policies then Audit. Set File and Object Access to success, then go to the selected file. Bring up the Properties for the file and select Security and then Auditing. Use Add to select the group of users you wish to Audit and finally the event you need to monitor.

You can view the results in Event viewer.

Hope this helps you out.