Auditing folders Help

[jspurr]

Hi i am running windows 2000 small business server and some folders disapear before the backup can get to them (i think its the user deleting them) but i need proof so i tried turning on delete successful auditing on that folder but it says i need to enable it via group policy so i tried that but it is still not working. nothing is showing up in the Security Event Log.

does anyone have any suggestions?

 

[drtree]

Hi, you can set up a Group Policy (within the Active Directory Users and Computers snap-in) and enable auditing (I believe it's in the Computer Settings, Security Settings section) at the Domain Level. If you're not using an AD domain, you can log onto the user's machine as an admin and set it up using the Group Policy snap-in for the MMC. The process is basically the same, except that it will only effect the local machine and not all machines in the domain. You'll have to check on this, but I believe you want to audit Privilege Use (failure) or Object Access (Failure).

HTH,

Doc Tree