Re: Audit deletion of a folder

jabrandt_at_online.microsoft.com
Date: 08/12/04 

Date: Thu, 12 Aug 2004 12:30:34 -0500

Auditing writes to the security event log, no way that I know of around
that.
If you have a folder on one specific machine why not enable auditing on that
one specific machine or folder? 

-- 
James Brandt [MSFT]
"SSK" <SSK@discussions.microsoft.com> wrote in message 
news:29FE576E-4989-4C7C-8EDE-F8EBE6023595@microsoft.com...
> Dear Sir ,
>
> Need to audit  deletion of a folder . But the object access should not be
> enabled in Domain Controller Security Policy . If the object access should 
> be
> enabled then it should not fill the security log file in event viewer .
> Please Help
>

Relevant Pages

  • Re: Folder reappeares on desktop
    ... Enabling auditing of object access generates a lot of system events such as those ... I would be looking for an Event ID 560 for the parent folder where the ... security log when that happens but it is worth a try. ...
    (microsoft.public.win2000.security)
  • Re: Secure logging of actions of Win2000 administrator?
    ... Windows NT/2000 auditing works a little differently than you think, ... want to monitor a folder, right-click on the folder, and in the Properties, ... select Security and Advanced. ... The administrator can clear the log, ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: How to audit a share folders in a file server?
    ... Open the properties from the folder, go to security, advanced and check the auditing tab. ...
    (microsoft.public.windows.server.general)
  • Re: president of the company :)
    ... the only way to gaurantee security to his folders is to keep these ... documents off the network, away from the internet and especially email. ... >>folder for authenticated users so if anyone tries to get ... >>security event log based off of the actual explanation as ...
    (microsoft.public.win2000.security)
  • Re: Event Viewer problem
    ... Auditing is enabled via User Manager, printer properties, or file/folder ... Administrator privileges are required to view the Security ... and System folder full of event but there is nothing in the Security ...
    (microsoft.public.windowsxp.general)