How To Enable File Auditing – Windows Server 2008 R2

IT Support Forum Forums Windows Windows Server 2008 R2 General Discussion How To Enable File Auditing – Windows Server 2008 R2

This topic contains 1 reply, has 2 voices, and was last updated by  tornstenkristen 1 year, 7 months ago.

  • Author
    Posts
  • #1118

    Webmaster
    Keymaster

    This is a super short guide to enabling file auditing on Windows Server 2008 And Windows Server 2008 R2. To enable file auditing:

    1. On the local security policy of the server (or GPO), enable file auditing (Control Panel -> Administrative Tools -> Local Security Policy. Then Local Policies -> Audit Policy -> Audit Directory Service Access Success | Failure)
    2. Enabling file auditing on the files and folder you want to audit (Right click the file or folder -> Properties -> Security tab -> Advanced -> Auditing -> Add users you want to audit, which is probably the Everyone group with all permissions)

    You will then be able to see audit logs in the Windows Event Viewer, under the Security log.

  • #1136

    tornstenkristen
    Participant

    Thanks for sharing step-wise instructions to enable auditing on file server.
    I also find one another informative PDF guide that provides a depth information to enable auditing on file server and track every critical changes into real time : lepide.com/guide/enable-file-folder-access-auditing.pdf

You must be logged in to reply to this topic.