Windows NT Server Logs 3

[jguillory]

Where can I find logs on shared folders on an NT 4 Server? For instance, if a folder or files were deleted and who they were deleted by.

 

[mcconmw]

All messages along those lines will be in the security log of the event viewer, if and only if, you have auditing turned on and have selected the folders to be audited.

 

[technidiva]

So how do you go and turn the auditing on for these folders?

 

[mrstever]

I've change the audit properites of files a few times - I think it goes along these lines:

Right click on the file(s) that you want to change the audit properties of and select the "properties" option. From there select the security tab followed by the "auditing" button.

This will bring up a window that allows you to select which users you want to audit along with what changes you want to log. The audit appears in the security log file, busy directories will generate a lot of log entries.

Hope this answers the question.

SR

 

[DevilDog]

You will also want to turn on auditing via the User Manager for Domains. Go to Policies\Audit. There are more options here for setting audit policies across the domain. -- Devil Dog --