Logging user file access in NT domain

[FUBAR911]

Can anybody tell me if this is possible? I need to be able to check up on users in our org. A situation has arisen where an employee is suspected of accessing files and changing them when they should not. I need to know if it is possible to log the files a specific user account accesses through out the day over a 14 day period.

Thank you,

 

[penauroth]

Go to the advanced security settings on the folder the user has access to and select the Auditing tab. Select the user or group you want to track and the action to log. When the user performs the actions specified in the audit trail an entry will be made into the event viewer (System, I think). Filter the event log on auditing.

Paul

Work on Windows, play on Linux.

 

[FUBAR911]

Thank you, will you be able to pull a report from the event viewer? If not would you have to use another application? As far as file servers go sifting through the event viewer can take a lot of time.

Thank you,