Auditing folder access

[cgagliano]

I have setup auditing of certain folders on a shared drive. The problem
I am facing is that when I access a folder that has subfolder set for
auditing I recieve hundreds of messages in my Security event log.

For instance say I have a folder structure like this:
\users\ (everyone can list content on this folder.)
\users\john (auditing turned on for access failure)

This goes for everyfolder that I have under the user folder. Inaddition
to this. If I even click on the folder once I recieve a message.

 

[Steven L Umbach]

Audit only the bare number of users for the bare number of permissions for
the bare number of objects to try and minimize those events. Instead of
auditing all failure permissions maybe you just want to audit failure for
read or write or whatever it is you want to track. --- Steve