Server 2008R2 File System Auditing


i need audit single folder on server file creation events. has me
stumped have partially working random users.

i have ran auditpol /set /subcategory:"file system" /success:enable /failure:enable capture audit events

i have enabled auditing creating files group.

it auditing data myself , random other users, estimate 5% of total users being audited. ideas?



-drew


 

hi,

the following articles helpful work:

http://support.microsoft.com/kb/310399

http://technet.microsoft.com/en-us/library/cc731607(ws.10).aspx

there similar thread reference.

http://social.technet.microsoft.com/forums/en-us/winserversecurity/thread/9e633bad-cda6-4ec4-8f04-c01de57ce767


please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread.



Windows Server  >  Windows Server General Forum



Comments

Popular posts from this blog

Group Policy Event ID 1058 Error Code 1326 (The user name or password is incorrect)

Suspicious event log Event ID: 4905

DCOM received error "2147746132" from...