Auditing

  • Thread starter Thread starter Harrison Midkiff
  • Start date Start date
H

Harrison Midkiff

Hello:

I need to enable auditing on one of my folders. The sub-folders have
varying NTFS permissions. I think if I add auditing it will not effect the
normal NTFS permissions. Can someone confirm this for me? Thanks.

Harrison Midkiff
 
audit entries are SACLS
permissions are DACLS

SACLS and DACLS are maintained sperately and modifying one will not affect
the other. Even the inheritance flags are seperate for auditing and
permissions.
 
Harrison Midkiff said:
Hello:

I need to enable auditing on one of my folders. The
sub-folders have
varying NTFS permissions. I think if I add auditing it will
not effect the
normal NTFS permissions. Can someone confirm this for me?
Thanks.

Harrison Midkiff
Click to expand...

Hi,

Auditing only tracks usage. It has no affect on NTFS Permissions.

Cheers,

Lara
 
Hi

Yes, as other MVP has stated, Auditing and NTFS permission are individual
and will not affect each other.

Each object has a set of security information, or security descriptor,
attached to it. Part of the security descriptor specifies the groups or
users that can access an object, and the types of access (permissions)
granted to those groups or users. This part of the security descriptor is
known as a discretionary access control list (DACL)

In addition to containing permissions information, however, a security
descriptor for an object also contains auditing information. This auditing
information is known as a system access control list (SACL)

Please refer to the following article to get more details.

Audit settings on objects
http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windo
ws2000/en/advanced/help/sag_seconceptsunlocac.htm

Further questions, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top