Audit for deleted files
- From: "Roddy Matheson" <roddy.m@xxxxxxxxxxxx>
- Date: Thu, 4 May 2006 12:51:29 +0100
I have had a few problems on my network recently where files have gone
'missing' and nobody will admit to deleting or moving them. I want to enable
auditing of all the files and folders within Company so I can go to
suspected staff with hard eveidence and give them the training they
obviously need.
Steps I've taken so far:
1. Enabled audting for'object access' GP object (success and failure)
2. Forced GP update
3. Selected auditing on the Company folder, for group 'everyone' auditing
for success and failure of delete and delete siles and subfolders
4. Applied (took a while)
5. Tested it by creating a file within Company folder and then deleted it
6. Checked security event log for entry but nothing appeared.
Any ideas what I might have done wrong or steps I might've missed?
Thanks for any help...
Roddy
.
- Prev by Date: Re: How-to Uninstall WSUS
- Next by Date: RE: what if I add a second domain controller to my network?
- Previous by thread: RE: Offline File Synchronization Problem
- Next by thread: RE: what if I add a second domain controller to my network?
- Index(es):
Relevant Pages
|
