Monitoring Files 1

[caddnima]

Monitoring Files...

Is there a way to minitor files. Like who deleted it or moved it or updated it or whatever info you can get...

Thanks,

 

[brontosaurus]

Enable Auditing in Group Policy, then enable File and Directory auditing on the folders themselves.

 

[caddnima]

Sorry, How do I do this? I tried looking but can't find it...

Thanks

 

[brontosaurus]

In Group Policy, go to \\Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy and enable everything.
From your file server, go to the folder in question, right click, Properties, Security, Advanced, Auditing.

 

[caddnima]

Ok, I did what you said, then what.

Where do i check these info? I'm guessing on the event viewer.

Stupid Question...

 

[brontosaurus]

Event Viewer it is. Any users (or group of users) that you added to the Auditing tab on the file server, will generate event log messages when they modify files.
At least that's what's supposed to happen!