Re: Who last saved a file?

From: Dusko Savatovic (savatovic.removespam_at_hotmail.com)
Date: 01/13/05 

Date: Thu, 13 Jan 2005 13:14:37 +0100

Turn on auditing.
It's a two step process.
1. Turn on Audit Policy thru either:
a) Local Security Policy - on each file server or
b) Group Policy - in AD site, domain or OU

2. Set auditing on partcicular folder.

Review auditing results in security log.

Dusko Savatovic

"David Callaghan" <inform.spmoff@btinternet.com> wrote in message
news:1105617189.546628.310970@c13g2000cwb.googlegroups.com...
> Hi
>
> I'm a Novell person. I am in a school using Server 2003. How could I
> find out which user last created/wrote to a file? In Novell I used
> filer or similar utilities - anything in microsoft?
>
> The reason is I need to know is the pupils round here will be tempted
> to create files with offensive names and put these in public places -
> I've been told this is untracable.
>
> Cheers
>
> David Callaghan
>

Relevant Pages

  • Re: Auditing object access
    ... Local Security Policy will be overridden by Domain/OU/or Domain Controller Security ... Enabling auditing on folders will generate tons of events. ... and audit only what permission you want to track. ...
    (microsoft.public.win2000.group_policy)
  • Re: Auditing on a member server
    ... Look in Local Security Policy to make sure that it shows ... auditing is enabled as you expect. ...
    (microsoft.public.windows.server.security)
  • Re: Enormous security problem
    ... > Windows cannot query for the list of Group Policy objects. ... >> Are there errors on the file server perhaps kerberos errors in the system ... >>> snap in to manage the DC, shows up in the DC's security log as a failed ... I had to disable account lock out in the defualt domain ...
    (microsoft.public.windows.server.general)
  • RE: filenames changing
    ... Mal is right, let's turn on file auditing, and troll the security log ... the server resides, right-click on it and click Properties. ... On the Group Policy tab, select a GPO and click Edit (if there's no GPO ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: auditing help needed
    ... Auditing of files and folders certainly has its ... controllers at the domain controller policy level. ... > want to enable auditing on every file/folder for failure so I can see ...
    (microsoft.public.win2000.security)