email alerts on permission changes

[Sean Rooney]

Hi
Does anyone know if there is a way to send an email alert if a permission is
changed on a windows 2000 server, or if a service is stopped.
Thanks
Sean

 

[tom]

there might be some 3rd party s/w that might, but microsoft would say thats
what you use auditing for!

Tom

 

[MadDHatteR]

Sending an email for a permission change
I'm pretty sure this can be accomplished by attaching to a file/folder's
permission event change using WMI. You might need to audit and attach to the
event log... I'm fuzzy on the details, but poke around for capturing custom
events and WMI or something. This is detrimental to the computer's
performance.

As for sending email when services stop, this can be configured under the
Recovery tab. For First Failure: (and optionally Second, Subsequent
failures) choose "run a file". As for what to run -- a command file that
sends an email (we use Blat! for this purpose, but invoking a script,
writing to a log file, poking telnet in a funny way -- anything's possible)
and restarts the service (net start blah) works great.

\\ MadDHatteR