RE: filenames changing
- From: v-natliu@xxxxxxxxxxxxxxxxxxxx ("Nathan Liu [MSFT]")
- Date: Mon, 12 Dec 2005 08:38:32 GMT
Hi Bleck,
Thank you for your kind update.
First of all, my sincerest apologies for the delay in responding due to
weekend, thanks for the understanding.
Please kindly note the partner managed newsgroups are staffed weekdays by
Microsoft Support professionals. Our goal is to provide a one business day
response to all posts.
For time critical issues (not business down), we encourage you to contact
CSS directly for more immediate assistance:
International Support (non-US/Canada):
http://support.microsoft.com/common/international.aspx
US and Canada:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;OfferProPhone
Considering the current condition, since this issue random occurs, let's
continue monitoring it, and then isolate this issue:
1. Mal is right, let's turn on file auditing, and troll the security log
next day to see what user/process made changes & when.
To enable the file auditing, please refer to the following steps:
1) Enable object access auditing
A. Click Start, click Run, type "dsa.msc" and click OK.
B. Locate the OU (Domain Controllers since it is the SBS server) in which
the server resides, right-click on it and click Properties.
C. On the Group Policy tab, select a GPO and click Edit (if there's no GPO
listed, you may click New to create one).
E. Expand Computer Configuration -> Windows Settings -> Security Settings
-> Local Policies, select Audit Policy.
F. On the right pane, double-click Audit object access.
G. Ensure "Define these policy settings" is checked, select Success and
then click OK.
H. On the server, run the following commands to apply the policy:
secedit /refreshpolicy machine_policy /enforce
For additional information about using SECEDIT in Windows 2000, refer to:
227302 Using SECEDIT to Force a Group Policy Refresh Immediately
http://support.microsoft.com/?id=227302
2) Set auditing policy settings for the folder
A. On the server, open Windows Explorer, locate the folder you want to
audit.
B. Right-click the folder, click Properties, and then click the Security
tab.
C. Click Advanced, and then click the Auditing tab.
D. Click Add. Type "Domain Users", and then click OK.
E. In the Auditing Entry dialog box, select Success for "Delete", "Delete
Subfolders and Files", "Create Files / Write Data" and "Create Folders /
Append Data".
F. Click OK, and select "Replace auditing entries on all child objects with
entries shown here that apply to child objects".
Related Knowledge Base article:
301640 HOW TO: Set, View, Change, or Remove Auditing for a File or Folder
in Windows 2000
http://support.microsoft.com/?id=301640
Note that the auditing events are logged in the security log. The security
log is limited in size, you may increase the maximum size for the security
log to make sure no events are missed. To do so:
A. Open Event Viewer.
B. Right-click Security and click Properties.
C. Increase the log size.
2. Make sure that your server have not been infected by virus. Please
update your antivirus software to the latest version and scan the whole
server. Please also check the spyware on the server.
I appreciate your time and cooperation. If anything is unclear, please feel
free to let me know. I am looking forward to hearing from you.
Best regards,
Nathan Liu (MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: filenames changing
>thread-index: AcX8qHDJbwEg/P53QOyrxY08L712jw==
>X-WBNR-Posting-Host: 194.6.115.72
>From: "=?Utf-8?B?QmxlY2tmaWVsZA==?=" <Bleckfield@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <5FF0BB0B-44D9-4706-A9FD-2A78104799B6@xxxxxxxxxxxxx>
<eK0qioI$FHA.832@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: filenames changing
>Date: Fri, 9 Dec 2005 02:08:02 -0800
>Lines: 11
>Message-ID: <C906515E-675F-4BA5-884B-95F0C1376C2C@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:229014
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>The strange thing about this problem is that the file is being saved
>correctly from the client onto the network drive, and it appears to remain
>names correctly for some unspecified time, until which (seemingly
overnight
>when everyone has left) the file name gets the extra characters inserted.
>There is no relation between the files which are being renamed and it all
>looks apparrently random
>
> The only things that have changed are the 2 workstations that were being
>used before without a problem were replaced for new machines, but there is
no
>software on them that should be interfering. and they have been changed
over
>for around 5 months.
>
.
- References:
- RE: filenames changing
- From: "Nathan Liu [MSFT]"
- RE: filenames changing
- Prev by Date: Re: Messages Send repeatedly
- Next by Date: RE: 2 nics, isa, hw fwall
- Previous by thread: Re: filenames changing
- Next by thread: RE: Lost sound on my server
- Index(es):
Relevant Pages
|
