Folder Audit

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

How can I configure audit in a folder using domain based audit ?
I want to log everybody in the domain that access this folder that is
located in a DC.

The DC is a Windows 2000 Server and workstations are Windows 98.

Maybe a KB can be usefull too.

Thanks
 
1. Enable object auditing through Group Policy on the Domain Controllers OU
in Active Directory Users and Computers: Computer Configuration/Windows
Settings/Security Settings/Local Policies/Audit Policies - enable
Success/Failure for Audit object access.

2. On the shared folder click the Security tab/Advance/Auditing - add the
users/groups and type of access you want to audit.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
 
Make sure you follow Doug's instructions on enabling auditing of object access at the
"domain controller" level which would by default be Domain Controller Security
Policy. It will not work if you try to enable it at the "domain" level or local
security level on a domain controller assuming the domain controller is in the
default domain controller container where you should not move it from. You can use
Local Security Policy on the domain controller and view the auditing settings where
object access must show as being enabled in "effective" settings. --- Steve
 
Back
Top