Re: Files and folder monitor

In news:ua9t3bdSGHA.4384@xxxxxxxxxxxxxxxxxxxx,
FusionGuy <sbearusa32 at &emSen& dot com> stated, which I commented on
below:
Try this handy tool:
http://www.codeproject.com/csharp/rteventreader.asp


before it shows up in the Event logs to use this nifty utility, auditing has
to be enabled on the machine, whether thru Group Policy or a local policy to
monitor files, folder and/or printer access. That would "Object Access" in
the policy to audit these type of events.

Hopefully these links are helpful for the original poster:

Enable and Apply Windows Security Auditing:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q300549&sd=tech

300958 - HOW TO- Monitor for Unauthorized User Access in Windows 2000:
http://support.microsoft.com/default.aspx?scid=kb;en-us;300958

How To Set, View, Change, or Remove Auditing for a File or Folder ...:
http://support.microsoft.com/default.aspx?scid=kb;en-us;301640&sd=tech

How To Audit User Access of Files, Folders, and Printers in Windows XP:
http://support.microsoft.com/?kbid=310399

Advanced Server con07.htm Auditing File and Folder Access:
http://osr507doc.sco.com/en/ASUConceptsG/con07012.htm

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.

It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only thing in life is change. Anything more is a blackhole consuming
unnecessary energy. - [Me]



.

Relevant Pages

  • Re: Access Denied not logged
    ... Logging authentication events and auditing file and folder access are two ... from an event capture perspective. ... If you set up auditing of login events, policy change, etc., these things ...
    (microsoft.public.win2000.security)
  • Re: Autoexec.nt file missing?
    ... you can't enable Auditing on a computer running Home Edition. ... You must specify what to audit. ... >> example, a file, folder, registry key, printer, and so forth-that has its ...
    (microsoft.public.windowsxp.newusers)
  • Re: Change to folder permissions - What event is logged?
    ... Based on my research, after you enabled Change Permission auditing, if ... double-click "Audit object access". ... locate the file or folder you want to audit. ... Select the Successful or Failed check boxes for Change Permission action ...
    (microsoft.public.windows.server.sbs)
  • RE: Change to folder permissions - What event is logged?
    ... Based on my research, after you enabled Change Permission auditing, if ... double-click "Audit object access". ... locate the file or folder you want to audit. ... Select the Successful or Failed check boxes for Change Permission action ...
    (microsoft.public.windows.server.sbs)
  • RE: filenames changing
    ... Mal is right, let's turn on file auditing, and troll the security log ... the server resides, right-click on it and click Properties. ... On the Group Policy tab, select a GPO and click Edit (if there's no GPO ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)