RE: Mystery deleted directories

From: mingram27 (mingram27_at_discussions.microsoft.com)
Date: 02/23/05 

Date: Wed, 23 Feb 2005 07:05:04 -0800

Ray,

Is there any way to set at the GPO an auditing policy on JUST shares
throughout all of my servers? I do not want have to set auditing on all
folders on all my folders. Please let me know if this sounds weird.

thanks

"mingram27" wrote:

> here is my prooblem:
>
> - file auditing is set up on the DC in the GPO
> - directories haver recently been deleted ( twice in two weeks )
> - created directory and deleted it myself and no footprints were created
> - evt log does not show directory being deleted nor who connected to the
> server to delete the directory or the files in it.
>
> Has anyone experienced this or might have a configuration setting wrong here?
> Please help. thanks
> --
> Phil Network Admin

Relevant Pages

  • Re: Auditing GPO Win2000
    ... You can audit auditing on any W2K computer either in Local Security Policy or via a ... GPO in the container where the computer resides. ... Auditing is part of "computer" configuration.--- Steve ... > All my meber servers are in an OU called Terminal Servers. ...
    (microsoft.public.win2000.group_policy)
  • Auditing GPO Win2000
    ... default domian policy but how about auditing. ... All my meber servers are in an OU called Terminal Servers. ... Do I need to enable Auditing on GPOs and link them to the ... or simply if I apply ther GPO to the Domain Controller OU, ...
    (microsoft.public.win2000.group_policy)
  • Re: audit deletions in shared folders
    ... which for a share means the sharing-out machine. ... Auditing can be set with GPO but you need to be very careful, ... monitoring the deletions of items in shared folders on the servers. ...
    (microsoft.public.win2000.security)
  • Re: GPO Auditing
    ... So, I need to go one by one and set the auditing, correct? ... I was trying to audit the AD itself, ... > GPO? ... > it works like file auditing where you have to both enable it in general ...
    (microsoft.public.win2000.active_directory)
  • Re: HELP - File Auditing
    ... > We have performed all of the below on many servers with no results... ... Auditing must be enabled on ... > individual objects for audit events to be logged. ... >>audit policy setting take effect only when the policy ...
    (microsoft.public.win2000.security)