RE: log file for folders

From: Stephanie Doakes [MSFT] (sdoakes_at_online.microsoft.com)
Date: 06/30/04 

Date: Wed, 30 Jun 2004 17:59:10 GMT

You will need to enable autiting of object access.

Open the Group Policy management help and review the setting "Audit object
access".

You can configure this security setting by opening the appropriate policy
and expanding the console tree as such: Computer Configuration\Windows
Settings\Security Settings\Local Policies\Audit Policy\

When you are auditing file access you have two steps; enable the policy and
then go to the auditing tab on the folder(s) and enable auditing there also.

Thanks,

Stephanie B. Doakes
 MCSE 4.0/2000/2003 MCSA 2003
 Microsoft® Enterprise Platform Support
 Microsoft Windows Small Business Server 2003
 Designing, Deploying and Managing Small/Medium Size Business 2003 - MCP

This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • Re: Auditing file deletion
    ... The problem is that hundreds of other Object Access events get logged, ... just the file and directory deletions. ... Default Domain Controllers Policy. ... double-click Audit Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 560 SC Manager
    ... the failure audit error is related to object access. ... These audit error occurs because the "audit object access" policy has been ... Disabling this policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 560 SC Manager
    ... I have disabled the audit object access in group policy but we still ... the failure audit error is related to object access. ... These audit error occurs because the "audit object access" policy has been ... Disabling this policy ...
    (microsoft.public.windows.server.sbs)
  • Re: Event 560 SC Manager
    ... I have disabled the audit object access in group policy but we still ... the failure audit error is related to object access. ... These audit error occurs because the "audit object access" policy has been ... Disabling this policy ...
    (microsoft.public.windows.server.sbs)
  • RE: Audting object access on a DC
    ... I thought i had to enable auditing of abject access in a policy and then ... > Auditing "Object Access" in AD will log any and all object access throughout ... > the folders you want audited and your logs will reflect that. ...
    (microsoft.public.windows.server.active_directory)