File Auditing Issues



I would like to setup file auditing on our file server to see who is
deleting files. We are using Server 2003 Enterprise which is the
domain controller.

Here is the problem. I go into the Group Policy Editor and enable
auditing on "Audit Object Access." Then I add the ACL on the certain
folder on want to watch.

In my security log, I get a new entry every half second barking about
successful registry changes. This machine has never been touched in
terms of setting up auditing. I have gone to "regedit" and looked at
the permissions on each root folder. No auditing seems to be set at
the root. What can I do to stop the auditing of the registry? Is there
an easy way to see all ACL's that are set? Thanks!
.



Relevant Pages

  • RE: File server logging
    ... Have him turn on auditing at the system, ... an enormous amount of log entries if its a busy file server. ... 3131 South Las Vegas Blvd, Las Vegas, NV 89109 ...
    (Security-Basics)
  • Re: Audit trail or log when accessing a file
    ... One PC is a file server which holds the business-related ... wants to know if there's any way to know _which_ employees accessed ... There is auditing in XP Pro. ... How to audit user access of files, folders, and printers in Windows XP ...
    (microsoft.public.windowsxp.general)
  • Re: Who last saved a file?
    ... Turn on Audit Policy thru either: ... Local Security Policy - on each file server or ... Set auditing on partcicular folder. ...
    (microsoft.public.windows.server.general)
  • Re: Utility for Reporting which Folders have Auditing Turned On?
    ... A great collection of useful admin utils, including Auditing ... > I tried turning on Auditing recently on a file server with thousands of ... > files and folders and the server nearly died. ...
    (microsoft.public.win2000.security)