Need help on Auditing

  • Thread starter Thread starter PJ
  • Start date Start date
P

PJ

In Windows 2000. How would you audit if someone writes
files to external media. Also auditing for someone that
successfully or unsuccessfully changes the DACL.

Thanks
 
Writing of copying to external media would mean to a
floppy, network drive or burning a cd.

Thanks
 
The device would need to be able to have auditing configured on the folders/files
which can't be done on floppy/cdrom. It could be done on a network drive however by
configuring auditing on it. The link below gives details, though be sure to increase
the size of the security log a lot. Auditing of object access must be enabled on the
computer where the auditing is being done first. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549
 
Back
Top