Re: setting up an audit.

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 04/26/04 

Date: Mon, 26 Apr 2004 18:54:05 +0200

Audit can be configured in a Group Policy , You may have a look at the links
below.

Audit Policy
This module describes how to set different settings that apply to auditing.
It also provides an example of audit events created by several common tasks.
http://www.microsoft.com/technet/security/guidance/secmod50.mspx

Microsoft Security: Threats and Countermeasures Guide - Audit Policy
An audit log records an entry whenever users perform certain actions that
you specify. For example, the modification of a file or a policy can trigger
an audit entry.
http://www.microsoft.com/technet/Security/topics/hardsys/tcg/tcgch03.mspx

Microsoft Windows XP - Audit Policy
This section covers:...
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/aptopnode.mspx

814595 - HOW TO: Audit Active Directory Objects in Windows Server 2003
This step-by-step article describes how to use Windows Server 2003 auditing
to track user activities and system-wide events in Active Directory. When
you use Windows Server 2003 auditing, you can track both user activities and
Windows Server 2003...
http://support.microsoft.com/default.aspx?scid=kb;en-us;814595

314955 - HOW TO: Audit Active Directory Objects in Windows 2000
This step-by-step article describes how to use Windows 2000 auditing to
track user activities and system-wide events in Active Directory. When you
use Windows 2000 auditing, you can track both user activities and Windows
2000 activities, which are...
http://support.microsoft.com/default.aspx?scid=kb;en-us;314955

HOW TO: Enable Local Security Auditing in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;248260

HOWTO: Enabling Local Auditing Policies on Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;252412 

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"Helm" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:449101c42b90$48cdfa40$a501280a@phx.gbl...
> First off i'm new to setting policies so forgive my
> newbieness!
>
> I need to set this up fairly quickly or else i'd just
> start digging around and reading how-to articles. I
> figured asking here would get me to where i want to be
> quicker!
>
> Ok. I need to set up an audit so I can view in the event
> viewer under security almost anything that is done
> through a remote desktop session into the server. I need
> to know when files are changed/deleted/added.. ect.
>
> I have a 2003 server that is being accessed remotely by a
> software developer and I need to pay close attention to
> what is going on. So if you guys have any other audits
> that you think would be helpfull.. please let me know!
>
> I need kind of a step by step example to point me in the
> rigt direction.
>
> THANK YOU!
> helm

Relevant Pages

  • Re: Last to Modify
    ... The audit log question is moot though unless you have AD changes being logged ... Joe Richards Microsoft MVP Windows Server Directory Services ... >>To track changes within Active Directory you have to enable auditing. ... >>to track user activities and system-wide events in Active Directory. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Last to Modify
    ... least point the audit log to a specific time? ... > To track changes within Active Directory you have to enable auditing. ... > Microsoft Windows XP - Audit Policy ...
    (microsoft.public.windows.server.active_directory)
  • RE: Monitor File Access, Change or Delete
    ... folder with auditing for Windows Server 2003. ... Locate the file or folder that you want to audit. ... and then click the Auditing tab. ...
    (microsoft.public.windows.server.sbs)
  • Re: audit logons
    ... Audit can be configured in a Group Policy, You may have a look at the links ... This module describes how to set different settings that apply to auditing. ... Threats and Countermeasures Guide - Audit Policy ... Microsoft Windows XP - Audit Policy ...
    (microsoft.public.win2000.active_directory)
  • Re: Printer Disapear and Strange Admin Objects
    ... Printers disappearing from Active Directory: ... This module describes how to set different settings that apply to auditing. ... It also provides an example of audit events created by several common tasks. ... Microsoft Windows XP - Audit Policy ...
    (microsoft.public.windows.server.active_directory)