Audit of Changes made on a Mapped Drive

Discussion in 'Server Security' started by Neil Penn, Nov 3, 2004.

  1. Neil Penn

    Neil Penn Guest

    My manager wants the following report:

    "I want a weekly report of both new creations and edits of any folders on
    the T drive. It should ideally be in one single master spreadsheet called T
    Drive Directory Changes, saved in the staff Directory. Columns; Staff full
    name, date of edit, date of insert, name of Directory and Path."

    Is there any way to automate running a report showing all audited changes
    for a particular drive?

    Sorry if this is the wrong forum - let me know if I should be posting this
    elsewhere.
     
    Neil Penn, Nov 3, 2004
    #1
    1. Advertisements

  2. You can enable auditing of object access on a computer in it's security
    policy and then audit folders and files for what you need. This is not a
    quick and easy solution as a lot of events will be recorded in the security
    log and you have to view events 560 and 562 as pairs to make sense of
    things. Be sure to increase the size of the security log quite a bit and
    audit ONLY what you need for the permissions and users that you want to
    track. If you want to track changes to just folders, be sure to not include
    files in the folders. There may be third party software that can make the
    job easier such as that from LAN. The links below may be helpful. --- Steve


    http://support.microsoft.com/default.aspx?scid=kb;en-us;301640
    http://www.microsoft.com/technet/security/guidance/secmod144.mspx
    http://support.microsoft.com/default.aspx?scid=KB;en-us;q248260
    http://www.gfi.com/lanselm/ -- free trial download.
     
    Steven L Umbach, Nov 3, 2004
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.