Re: Network Security



Pavel A. wrote:
> "Eugene Gershnik" <gershnik@xxxxxxxxxxx> wrote in message
> news:OjsIB%23JIGHA.596@xxxxxxxxxxxxxxxxxxxxxxx
>> Bill wrote:
>>> I am interested in seeing who on the network opens Word files in a
>>> certain folder.
>>
>> If the files reside on NTFS volume you can enable auditing in the
>> directory (and by inheritance files) security descriptor. Never
>> tried this myself but if should work.
>
>
> I've just enabled auditing on a file - and lo and behold, it doesn't
> work! Something else is needed, like enabling some privilege or GPO..

Well I just tried to enable auditing on a file and got the following
message:

"The current Audit Policy for this computer does not have auditing turned
on. If this computer gets audit policy from the domain, please ask a domain
administrator to turn on auditing using Group Policy Editor. Otherwise, use
the Local Computer Policy Editor to configure the audit policy locally on
this computer."

This isn't my machine so I won't try to do what it suggests but it looks
like after modifying group policy this should work ;-)


--
Eugene
http://www.gershnik.com


.



Relevant Pages

  • Re: Audit Policies - help.
    ... > I am trying to set up an audit policy on my domain ... > controller to track the access to files and folders. ... > have selected to log the sucess and failure events. ... properties, Advanced to enable auditing. ...
    (microsoft.public.win2000.security)
  • Re: GROUP POLICY
    ... From what I see, the Audit policy exists and is is linked, but is not being ... Group Policy was applied from: ... Filtering: Not Applied (Empty) ...
    (microsoft.public.windows.server.active_directory)
  • Print Auditing
    ... "The current Audit Policy for this computer does not have auditing turned ... administrator to turn on auditing using Group Policy Editor. ... the Local Computer Policy Editor to configure the Audit policy locally on ...
    (microsoft.public.windows.server.security)
  • Re: Security Event Messages
    ... I did come across the website you provided which ... > changed the Group Policy settings for EFS Recovery Agent in a Group Policy ... > audit policy was changed. ... >> Any thoughts on a good reference for what I am looking for? ...
    (microsoft.public.security)
  • Re: user logs?
    ... Audit Policy. ... Then check the Event Viewer for the events. ... the Group Policy. ...
    (microsoft.public.windowsxp.security_admin)