Events audit

[=?iso-8859-1?Q?Carlos_M=E9ndez?=]

Regards, I want to be able audit the opening of the images
inside a folder. The problem is that it does not register
me
in the audit viewer the name of the image that I have
opened.
In the configuration of audit of the folder to audit I
have selected that registers the access " Traverse
Folder / Execute File ". The problem is that I open one
image and on having gone away to the events viewer ->
security, me
It registers the event but it does not indicate the image
name that I have opened.

I show you an example: it registers several information,
and
path where the image is in, but not the image that has
been opened.
The curious thing is that if I open a word document it
registers the name of the document.

Type of event: Wisdom
Origin of the event: Security
Category of the event: Access of objects
Go. Of the event: 560
It(He,She) dates: 02/02/2004
Hour: 10:35:14
User: DOMPTEC\cmendez
I equip: OFICINA-126
Description:
Opened object:
Servant of objects: Security
Type of object: File
Name of the object:
C:\PRUEBA

The access " To list FOLDER/Read dates " I do not want to
activate it
Because it me registers too many events.

 

[Curtis Clay III [MSFT]]

Hello Carlos,
Could you test auditing a particular image instead of the entire directory
to see if you get the results you're looking for?

This posting is provided "AS IS" with no warranties, and confers no rights.