I have had a few problems on my network recently where files have gone
'missing' and nobody will admit to deleting or moving them. I want to enable
auditing of all the files and folders within Company so I can go to
suspected staff with hard eveidence and give them the training they
obviously need.
Steps I've taken so far:
1. Enabled audting for'object access' GP object (success and failure)
2. Forced GP update
3. Selected auditing on the Company folder, for group 'everyone' auditing
for success and failure of delete and delete siles and subfolders
4. Applied (took a while)
5. Tested it by creating a file within Company folder and then deleted it
6. Checked security event log for entry but nothing appeared.
Any ideas what I might have done wrong or steps I might've missed?
Audit for deleted files ... Enabled audting for'object access' GP object (success and failure)...Selected auditing on the Company folder,... (microsoft.public.windows.server.sbs)
Re: Setting up security etc so Kids can play games...Need Help!! ... to enable auditing for access failures by users when running ... this approach involves modifying machine policy, registry... for object access (enabling auditing for failure should be sufficient, ... modify security settings on the registry keys where failure ... (microsoft.public.windowsxp.security_admin)
Re: DFS auditing ... I have configured SUCCESS for EVERYONE for DELETE AND DELETE SUBTREE. ... Deleted the DFS ROOT... >I just checked the auditing on the DFS-Configuration and it actually is set ... >> MVP Windows Server - Directory Services... (microsoft.public.windows.server.active_directory)
Re: DFS auditing ... > on my test W2K3 DC the only thing configured when ... > I have configured SUCCESS for EVERYONE for DELETE AND DELETE SUBTREE. ... > Category: Directory Service Access... >>I just checked the auditing on the DFS-Configuration and it actually is ... (microsoft.public.windows.server.active_directory)
