need to know who is doing what

[Frush]

Help! someone seem to have a lot of fun deleting important folder on my server. Is there some way to see who is accessing what on my server?

 

[markdmac]

How about you remove the modify rights on the folder?

Check the NTFS permissions to see who has rights tothe folder. Remove anybody that should not be in there.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[Frush]

well im new here and from what i heard i cant remove the modification rights since its containing .dbf files (foxpro dbase) and users need specific right im looking more for something like .log files on whos accessing what when. still thanks a lot your quite fast

 

[markdmac]

That will unfortunatley not be recorded. You should set some advanced rights on the folder.

For instance Remove Modify from the folder. Add modify to subfolders and files at the folder level.

Or, better yet, remove all of the modify rights and on your database files grant explicit modify rights.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[MarksSE]

He could enable Auditing on the server, right? That would log events to the EventViewer, depending on what he sets to be audited...

-Mark

 

[Frush]

i have enabled audit for "object access" in Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy

but uuh when i try to add an audit to a folder windows stills says that auditing isnt enable on the computer