tool that monitor file activity in a directory

[Didier]

Hi,

I need a tool that monitors a directory for write or read etc access.
I would like to set minimum rights for specific user in a directory
and it's subdirectory.

I'm using a special user account for our webapplication. This
webapplication creates word documents from templates, it writes logs
etc etc... This is what I need to monitor.

Does someone know of a tool that can help me?

For example it should report (I assume that I'm monitoring c:\webapps)
c:\webapps\logs - 10102003.log write by user webapp-user
c:\webapps\bin\xyz.exe execute by user webapp-user
c:\webapps\doc\xyz.doc created (write or anything else) by user
webapp-user....etc

Many thanks
Didier

 

[Keith W. McCammon]

Auditing. You can find information about this on TechNet, or in your help
file.

 

[Karl Levinson [x y] mvp]

And you can use a log watcher like IPSentry.com [around $100 US] or the free
log dumper from www.sysinternals.com to help you script alerts and responses
and such.

Some pointers to articles on Windows auditing:

http://securityadmin.info/faq.htm#auditing

The free SIM tool from www.gfi.com can also be useful at detecting file
changes, deletions, intrusions, etc. without being too complex to configure.

 

[Didier]

Thanks a lot! Great site!