Re: edb.chk edb.log and tmp.edb

Hi

does the log entry for the audit give any clue as to what the form of access
is or what process/owner is performing the access? In addition running a
utility
like ProcessMonitor with a filter set for the path to the file being
modified might
give a hint as the cause...

Lee Flight


"Will" <westes-usc@xxxxxxxxxxxxxx> wrote in message
news:kpWdnUZh5Y2B-gHYnZ2dnUVZ_r2onZ2d@xxxxxxxxxxxxxxx
"Lee Flight" <lef@xxxxxxxxxxxxxxx> wrote in message
news:ubZzjNyLHHA.4384@xxxxxxxxxxxxxxxxxxxxxxx
Hi

the local security settings for the server are stored in a JET database
(Secedit.sdb)
in %SystemRoot%\Security\database folder, the various edb files in the
Security folder
are likely associated with that (AD also uses a JET database which is
probably what
your browsing turned up).

Churn on those files is normal as security policy is (re-)applied to the
system. If the
churn is being logged you likely have some security policy in place that
is
auditing changes
to the %SystemRoot%\Security\ folder

Audit Policy I understand. Why are the files being rewritten every five
to 10 minutes though?

--
Will




.

Relevant Pages

  • Re: Security Exception when deploying a VB.NET 2003 solution.
    ... Bin folder to the same location ... The Config folder contains the files Local.Config and Context.Config, ... is indeed resolved by configuring the .NET security policy on the local ... solution to a testing server I simply copied the contents of the Bin ...
    (microsoft.public.dotnet.languages.vb)
  • Re: network folder is read-only even though file attribute says its writeable
    ... You're company have have applied a security policy to the network drives as ... folder attributes, see code below... ... This does not work though for network drives on my companies system. ... Dim reader As System.IO.DirectoryInfo ...
    (microsoft.public.dotnet.languages.vb)
  • Re: edb.chk edb.log and tmp.edb
    ... the local security settings for the server are stored in a JET database ... Security folder ... Churn on those files is normal as security policy is applied to ...
    (microsoft.public.windows.server.active_directory)
  • Re: changing audit-options
    ... I even try by logging on as the local administrator but - alas - the ... >> Control Panel/Administrative Tools/Local Security Policy ...under Local ... >> Policies select Audit Policy and double click on Audit account logon ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Azman Auditing
    ... Assignment of your security policy - be aware that domain policy may ... ADAM running on Windows XP x86 in respect of audit - again I do not know ...
    (microsoft.public.windows.server.active_directory)