On a Windows 2000 or 2003 Server I need to log each time a user adds/deletes a file or folder. Where do you turn this type of logging on?

Thank you.
0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


It's two fold.

First, you have to enable Auditing on the server. this can be done via GPO here:
Computer / Security / Local Policies / Audit Policy - You'd want to enable the Audit Object Access for Success (I think that's the one)

then you need to go to the folder that you wish to audit and go to properties, Security, Advanced, Auditing. then add in the group that you want to track, ie: Everyone, etc. Select the audit that you wish to perform, in this case, Create files / Folders , Delete files / folder etc.

Each time someone in this group makes a change that is triggered, an event is logged in the security log on the server.

you might also want to increase the size of the security log to ensure that you capture enough events.
Answered 07/06/2007 by: Chipster
Blue Belt

Please log in to comment