auditing

  • Thread starter Thread starter george
  • Start date Start date
G

george

How do you set up auditing so that I can see whether a file or folder has
been deleted or attempted to be deleted in a Domain?
 
You need to first enable auditing of object access and then configure auditing on the
folder itself in the security page/advanced/auditing. You will however generate a lot
of seemingly unrelated events in the security log so you may want to test it out
first and audit just bare minimum of permissions and avoid auditing the everyone
group. See the link below for more info. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
 
Back
Top