Re: Audting Folder Access

Tech-Archive recommends: Fix windows errors by optimizing your registry

On Sep 22, 3:09 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
Hello Al,

The auditing has to be set centralized with domain GPO. Additional it will
also be a good option to use folder auditing, to see what is going on. Open
the folder properties, go to security tab, choose advanced and theire you
can configure foldfer auditing.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.



On Sep 21, 12:13 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:

Hello Al,

Is this machine a domain member or standalone?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers
no rights.
I have a machine that is having files deleted nightly. I only have
the ability to edit the local GPO so I am using that to audit object
access. There isn't anything in a higher GPO that would seem to be
"blocking" this. I edit the local GPO - Computer
configuration/windows settings/security settings/local polices/audit
plicy and I sent "Audit Object access" to Success (I've tried both S
& F). And when I pull an RSop on this machine - this setting
(auditing object access) does not show up! I have done a gpupdate
/force, I have rebooted and that setting still does not show up in
the RSop. Am I missing something?

TIA
al- Hide quoted text -
- Show quoted text -

*************************
It is a domain machine. I don't have access to edit domain GPO's (in
this area) but I can obviously edit local GPOs. I thought the local
GPO would work but no matter what I try Object Access doesn't show up
in the RSoP. I was just wondering - can I not configure this in a
local GPO?
thanks!- Hide quoted text -

- Show quoted text -

************
So you can't audit object access through a local GPO?

Thanks!
Al

.

Relevant Pages

  • Re: Audting Folder Access
    ... The auditing has to be set centralized with domain GPO. ... Additional it will also be a good option to use folder auditing, to see what is going on. ... I edit the local GPO - Computer ... plicy and I sent "Audit Object access" to Success (I've tried both S ...
    (microsoft.public.windows.server.active_directory)
  • Re: File Auditing with Group Policy
    ... object access auditing as you have described and a script to turn auditing ... start generating shirtloads of audit events you might blow out your logs so ... The GPO doesn't come into this though. ...
    (microsoft.public.windows.group_policy)
  • Re: File Auditing with Group Policy
    ... object access auditing as you have described and a script to turn auditing ... start generating shirtloads of audit events you might blow out your logs so ... The GPO doesn't come into this though. ...
    (microsoft.public.windows.group_policy)
  • Re: File Auditing with Group Policy
    ... You will need a GPO to enable object access auditing as you have described and a script to turn auditing of the events you are after for each object. ... So if you start generating shirtloads of audit events you might blow out your logs so that they only hold a small amount of data. ... cetain folders we and only the create/write data successes and delete success ...
    (microsoft.public.windows.group_policy)
  • Re: Auditing GPO Win2000
    ... You can audit auditing on any W2K computer either in Local Security Policy or via a ... GPO in the container where the computer resides. ... Auditing is part of "computer" configuration.--- Steve ... > All my meber servers are in an OU called Terminal Servers. ...
    (microsoft.public.win2000.group_policy)