Shared folder server activity

45 pts.
File permissions
Log files
Network monitoring
Shared folders
Transaction logs
User monitoring
Windows Server
What would be the best way to log data for files in a shared directory (and sub-directories) on a server? The type of information needed would be something like this:
  • File accessed
  • By whom the file was accessed
  • Date/Time opened
  • Date/Time closed (if possible)
  • Date/Time file saved
Everything is a must except the date/time the file was closed, as I believe that cannot be tracked via the network. Is there a way to do this in Windows Server already.

Answer Wiki

Thanks. We'll let you know when a new response is added.

You will need to turn on auditing. Open the properties on the folder, go to security, advanced and check the auditing tab.


You will probably need to enable auditing (through group policy or local security policy), and then identify the folder you want to audit and set the appropriate settings.

To enable auditing through local security policy, go to Start -> All Programs -> Administrative Tools -> Local Security Policy.
In the Local Security Policy tool, expand “Local Policies” and select Audit Policy.
Double click on the “Audit Object Access” item and choose what events you want to audit.

Once enabled, right click on the shared folder, select “properties” -> “security” -> “advanced”, go to the “auditing” tab, and set the appropriate settings.

The audit results will be included in the “security” section, in event viewer.

Discuss This Question: 2  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Memonboys
    Hi everybody, your provided answer is correct but in the "security section" in event viewer in 1 minutes more than 450 events generates , in that most of the the events are useless and in 1 hour it goes thousands and lacs, so it is very difficult to view all the event it will take monts n year 4 me . and i can't have many options in snare/epilog software which is generally show in his websites to use all features we have to purchase . can u please provide me another better software to view this events .
    45 pointsBadges:
  • Labnuke99
    Try doing some research on Windows log management solutions. There are a lot of options out there and they range from simple with few features to full featured, complex solutions that are very expensive. may be a simple solution also.
    32,960 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: