auditing

G

george

How do you set up auditing so that I can see whether a file or folder has
been deleted or attempted to be deleted in a Domain?
 
S

Steven L Umbach

You need to first enable auditing of object access and then configure auditing on the
folder itself in the security page/advanced/auditing. You will however generate a lot
of seemingly unrelated events in the security log so you may want to test it out
first and audit just bare minimum of permissions and avoid auditing the everyone
group. See the link below for more info. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top