Re: Can you audit file access within Sharepoint Services 3.0?

OK, it sounds like we must place these documents on a regular 2003 file
server instead of WSS and enable security audting on the file server if we
can't spend the money on MOSS.

"Bart Tubalinal" wrote:

No, you can't enable it with Windows Explorer nor can you enable it with any
out of the box stsadm command.

I'm not too familiar with SCOM but I don't believe that has anything to
allow you to view the logs. Maybe one of the SharePoint-specific management
tools from Quest Software or AvePoint allows you to view those logs but I
haven't checked.

--
Bart X. Tubalinal
www.deviantpoint.com

"Mygposts" <Mygposts@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:92B7549F-AE7B-4AAA-9547-24B05E277088@xxxxxxxxxxxxxxxx
Can you browse through Windows Explorer to the document library and enable
auditing with the built in Windows Server tools and monitor the built-in
Windows security event logs?
Is there a separate Microsoft tool such as SCOM or a third party tool that
creates an interface to view audit logs for WSS 3.0 if you do enable
logging
via the command line?

"Bart Tubalinal" wrote:

I just realized that you were asking about WSS 3.0 and not MOSS. MOSS
offers
an interface to turn on/off auditing; WSS 3.0 doesn't. The mechanism is
there in WSS to have auditing but you'll actually need to write code to
turn
it on. And once you've got it turned on, there's no interface for you to
view the audit records so you'd have to build that as well.

--
Bart X. Tubalinal
www.deviantpoint.com

"Bart Tubalinal" <bart.tubalinal@xxxxxxxxxxxxxxxx> wrote in message
news:F1F8F023-D5F1-4FFE-86B5-ABD61D0FC77B@xxxxxxxxxxxxxxxx
Yes, you can either enable auditing at the site collection level (In
the
Site Collection Settings page) or you can create an Information
Management
Policy for specific lists/libraries to enable auditing at a more
granular
level. This can be found in the List or Document Library Settings page.
Both of these auditing settings allows you to audit when an item was
accessed (opened, downloaded, viewed, edited, moved, etc).

Note that I found that turning on auditing can quickly fill up your
database and there's no out of the box management page in SharePoint
that
will allow you to purge those audit logs. You'd have to write custom
code
(or there might be some 3rd party tools out there) to purge them.
--
Bart X. Tubalinal
www.deviantpoint.com

"Mygposts" <Mygposts@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C6C868A1-0C2A-45E9-AD28-5073E436BD05@xxxxxxxxxxxxxxxx
We would like to post some very confidential HR and financial
documents
on
WSS in as secure a manner as possible.
We are going to set up SSL with automatic redirection of the HTTP URL
to
HTTPS by redirecting through IIS. Is there anything else we can
easily
do to
increase security and auditing of access?

It seems that you can open a read-only copy without using the check
out
process and you are only required to check out when editing and I
don't
know
if that kind of access is logged,

I know you can adjust the permissions of documents within Sharepoint,
but
can you audit and log reports of access of those who do have access
showing
when documents were accessed and by whom?




.

Relevant Pages

  • Re: Too much auditing?
    ... Just like any security setting, it is typically unproductive to just pick ... You need to examine the capabilities of audit, ... If you log everything, set your logs to a much larger size, such as 64MB ... Failure auditing is not useful for most people, ...
    (microsoft.public.win2000.security)
  • Re: Can you audit file access within Sharepoint Services 3.0?
    ... you can't enable it with Windows Explorer nor can you enable it with any out of the box stsadm command. ... Maybe one of the SharePoint-specific management tools from Quest Software or AvePoint allows you to view those logs but I haven't checked. ... an interface to turn on/off auditing; ... view the audit records so you'd have to build that as well. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Auditing in Sharepoint
    ... You can also get a certain amount of auditing by turning on your IIS logging ... You can audit many functions from IIS logs ... > audit Sharepoint or has Microsoft any plans to provide auditing facilities ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Can you audit file access within Sharepoint Services 3.0?
    ... MOSS offers an interface to turn on/off auditing; WSS 3.0 doesn't. ... The mechanism is there in WSS to have auditing but you'll actually need to write code to turn it on. ... And once you've got it turned on, there's no interface for you to view the audit records so you'd have to build that as well. ... Both of these auditing settings allows you to audit when an item was accessed. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Auditing folders
    ... I'm not sure of the value of auditing successful file ... Those are going to fill up your logs, ... If you audit for a custom group that only ... >> problem is our event log files are huge by the end of the day because ...
    (microsoft.public.security)