Auditing on single user object? How?

[mytest]

1. I want to audit a particular user activity. How can I
do it.
2. What do you mean by everyone as a default user or group
in security tab/advanced auditing what if I remove it?

 

[Marin Marinov]

1. I want to audit a particular user activity. How can I
do it.
2. What do you mean by everyone as a default user or group
in security tab/advanced auditing what if I remove it?

What specific activity do you want to monitor - there are 7 categories
that produce auditing related to various user actions?
From your second question I can speculate that you are viewing auditing
on a file/folder. Yes, you can remove Everyone and add the user or group
which you're interested in. Also, don't forget to turn on "Audit object
access" but anyway the OS will remind you
What specific goal are you trying to accomplish?

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.