Announcement

Collapse
No announcement yet.

WinServer 2003 - Security audit - File modification

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • WinServer 2003 - Security audit - File modification

    Hi,

    I am managing a network based on Win Server 2003 , I configured auditing for Domain users for accessing folders and files, and I can see the logs in "Log Viewer" when a change happen.

    Now, What is the problem ?
    When a user deletes a file , in the "log viewer" the only thing it says is: something has happen successfully with no detailed information, it never mentions what has happened (No file name / no action specification).

    Can anyone help me how can I have logs with more details ?


    Cheers
    Last edited by primo.i; 15th November 2010, 13:39.

  • #2
    Re: WinServer 2003 - Security audit - File modification

    Object auditing:

    http://support.microsoft.com/kb/814595

    Comment


    • #3
      Re: WinServer 2003 - Security audit - File modification

      Can you clarify how you have configured file auditing and also can you confirm you are getting event 560 in your logs?
      Caesar's cipher - 3

      ZKHQ BRX HYHQWXDOOB GHFLSKHU WKLV BRX ZLOO UHDOLVH LW ZDV D ZDVWH RI WLPH!

      SFX JNRS FC U6 MNGR

      Comment

      Working...
      X