Shared folder server activity
45 pts.
0
Q:
Shared folder server activity
What would be the best way to log data for files in a shared directory (and sub-directories) on a server? The type of information needed would be something like this:
- File accessed
- By whom the file was accessed
- Date/Time opened
- Date/Time closed (if possible)
- Date/Time file saved

Everything is a must except the date/time the file was closed, as I believe that cannot be tracked via the network. Is there a way to do this in Windows Server already.
ASKED: Nov 18 2008  9:26 AM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
0
29820 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
You will need to turn on auditing. Open the properties on the folder, go to security, advanced and check the auditing tab. Other options might include Snare/Epilog.

-------------------------------

You will probably need to enable auditing (through group policy or local security policy), and then identify the folder you want to audit and set the appropriate settings.

To enable auditing through local security policy, go to Start -> All Programs -> Administrative Tools -> Local Security Policy.
In the Local Security Policy tool, expand "Local Policies" and select Audit Policy.
Double click on the "Audit Object Access" item and choose what events you want to audit.

Once enabled, right click on the shared folder, select "properties" -> "security" -> "advanced", go to the "auditing" tab, and set the appropriate settings.

The audit results will be included in the "security" section, in event viewer.
Last Answered: Nov 18 2008  2:02 PM GMT by Carlosdl   29820 pts.
Latest Contributors: Labnuke99   26290 pts.
0
0
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Memonboys   45 pts.  |   Nov 20 2008  4:16AM GMT

Hi everybody,

your provided answer is correct but in the “security section” in event viewer in 1 minutes more than 450 events generates , in that most of the the events are useless and in 1 hour it goes thousands and lacs, so it is very difficult to view all the event it will take monts n year 4 me . and i can’t have many options in snare/epilog software which is generally show in his websites to use all features we have to purchase . can u please provide me another better software to view this events .

 

Labnuke99   26290 pts.  |   Nov 20 2008  1:32PM GMT

Try doing some research on Windows log management solutions. There are a lot of options out there and they range from simple with few features to full featured, complex solutions that are very expensive. <a href="http://www.eventlog.com/" title="http://www.eventlog.com/" target="_blank">http://www.eventlog.com/</a> may be a simple solution also.

 
0