You can find detailed documentation about auditing on TechNet. I'd read
that, if you want details.
Generally speaking, you need to:
1) enable auditing via the system/domain policy
2) enable auditing of all required actions at the object level (file,
folder, drive, etc.)
3) see the entries in the event log
"Larry" <(E-Mail Removed)> wrote in message
news:176c501c4216f$1560ac00$(E-Mail Removed)...
> I have a need to audit the file and folder security to
> track changes to ACL. How do I set this up and where is
> it logged?
|