Logging Permissions changes

[Guest]

Is it possible to log permission changes on particular server
for example :log every change on file permissions made by the admin or power user ?
if so,how do I set such a rule
Thanks in advance
Niv.

 

[Steven L Umbach]

You would have to enable auditing of object access on that server and then
audit folders for just success of change permissions. I suggest you NOT
audit every folder on the computer but just those you need to track in order
to keep the amount of events down in the security log which can generate
very quickly. Also increase the size of the security log quite a bit to say
at least 10 mb. The links below may be helpful. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
http://www.microsoft.com/technet/security/guidance/secmod144.mspx