Logging

  • Thread starter Thread starter Chris
  • Start date Start date
C

Chris

Hi,



How can I retrieve and print security logs, so that management can see who
has accessed folders/files and when? There must be a better way then
scrolling thru Event Viewer and filter only file access related events.



Advice please!



Chris
 
Hi,



How can I retrieve and print security logs, so that
management can see who
has accessed folders/files and when? There must be a better
way then
scrolling thru Event Viewer and filter only file access
related events.



Advice please!



Chris
Click to expand...

you need to configure auditing for the server and after that you need
to configure what files/folders are audited and who is audited. All is
logged into the security event log. Do some tests to see which event
IDs are generated and then use eventcomb to get all IDs from the
server.
Be aware that is you audit when each user accesses a file/folder you
logs can become huge and if that goes fast newer events will overwrite
(depending how you configure logging) older events. For this you may
need a professional auditing tool that retrieves the logs from time to
time
 
Back
Top