Re: Script to enable auditing on all client PCs in a Domai

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hello Laljeev,

What do you like to audit and why the complete c-drive? How will you monitor that amount of data?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hi

Can Any one help me to write a script to audit C: drive of all my
client PCs which are windows 2003 Domain members. We configured GPO
for auditing and the below URL gives me how to check existng SACL,
http://msdn.microsoft.com/en-us/library/aa393592.aspx

But to add a new entry in auditing tab of any folder can any one help
me to complete the script?

Thanks in advance



.

Relevant Pages

  • Multiple vulnerabilities found in CSGuestbook by CoolSerlets.com
    ... About this script: This is an open source GuestBook script offered by CoolServlets.com ... About the audit: This audit was performed by Daxgrapol and Dopel for RACAT. ... Only the first special character is filtered off of the return string. ... - Buffer overflow is possible (input field length not checked). ...
    (Bugtraq)
  • Re: permissions
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Enabling file auditing is a 2-step process. ... Configure an audit entry on the specific folderthat you wish ...
    (microsoft.public.windows.file_system)
  • Re: Windows XP login script problems with using If Exists
    ... I think you were relying on fragile automation and should fix your script. ... You should leave the audit server on all the time. ... We've come across a problem with XP machines running a login script, the problem doesn't happen with the Windows 2000 machines. ... Problem is we have a audit server which when turned on will audit the companies computers using a login script, when turned off the script using 'IF Exists' command and should not be able to find it and move on, what we found is when the Audit server is not on, the script is stuck at this part and seems to either keep on trying to find the server or times out and doesn't continue. ...
    (microsoft.public.windows.server.scripting)
  • RE: Audit domain logons
    ... For a better explination of the two audit policies please see the following ... As for your question about the GPO applying to a NT4 BDC, ... And I'm not entirely sure about the script. ... > I have some questions regarding the auditing of logon events. ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to monitoring who has deleted a NTFS folder
    ... If when adding the auditing ACE in the Auditing tab within the Security ... I know you said audit policies don't solve the problem. ... Now when a user deletes any subfolders you will get an entry in your ...
    (microsoft.public.windows.server.security)