Server 2003 folder & file auditing

32960 pts.
Tags:
Auditing
Microsoft Windows Server 2003
Windows Server
I know that object auditing can be turned on in Server 2003. The Windows security resource kit says that about 30 events can be logged to the event log just for opening a file, writing a line to the file and then closing the file. This can obviously fill up an event log very quickly and make the volume of data cumbersome to review. We have need to monitor some particular folders and files for activity. Is anyone already doing this on Server 2003 and if so, how did you address the volume of data and reporting? Thanks for the assistance.

Answer Wiki

Thanks. We'll let you know when a new response is added.

Windows Server 2003 allows you to perform granualr auditing so that you can usdit one folder and not another. Right click on the folder that you want to audit, and then choose the Properties command from the shortcut menu. Go to the properties sheet’s Security tab, and click the Advanced button. The resulting properties sheet contains an Auditing tab that you can use to configure auditing for that specific folder.

The best way to control the volume of log entries that are produced is to audit only the types of events that you really need.

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Kevin Beaver
    You really need to narrow down exactly what you're looking for to avoid information overload which leads to overlooking what could be considered as important information. Check out some of the third-party solutions by GFI and others that can make this easier.
    17,385 pointsBadges:
    report
  • Labnuke99
    Read, write, delete, add. Pretty much the normal file operations under a specific folder tree.
    32,960 pointsBadges:
    report
  • Labnuke99
    And... modify file permissions.
    32,960 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following