Click here to get back home

All I want to do is audit "delete" events, but log gets massive: how to do effiecntly?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
All I want to do is audit "delete" events, but log gets massive: how to do effiecntly? roga 11-03-2005
Posted by roga on November 3, 2005, 8:59 am
Please log in for more thread options
 I am trying to audit "deletes" only on a shared folder (and subfolders) for
domain users

However the security log fills with masses of irrelevant entries, and gets
so large it messes up vss backup! and after 4 days it reaches its size limit

How can I efficiently audit users deleting files and folders?

regards

Roga





Posted by S. Pidgorny on November 3, 2005, 8:44 pm
Please log in for more thread options
 Audit changes of the folders and not of the folders' contents?

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

>I am trying to audit "deletes" only on a shared folder (and subfolders) for
>domain users
>
> However the security log fills with masses of irrelevant entries, and gets
> so large it messes up vss backup! and after 4 days it reaches its size
> limit
>
> How can I efficiently audit users deleting files and folders?
>
> regards
>
> Roga
>
>
>




Similar ThreadsPosted
failed/successfull audit delete folder and delete file and folder November 15, 2006, 8:12 am
audit logon/logoff events on terminal server July 18, 2007, 10:29 am
SMTPSVC events June 13, 2006, 9:11 am
Auditing Security Events May 10, 2007, 1:54 am
Follow-up to Empty 529 Events in Security Log July 27, 2006, 12:02 pm
How to store windows events log in remote server July 31, 2005, 6:44 pm
Security Log - Events 680, 529 and 675 for NT AUTHORITY\SYSTEM every two minutes February 5, 2006, 11:50 am
Multiple 538 and 540 ID's in 2003 server Security Events Log? August 23, 2006, 12:58 am
KB 925902 causes SceCli 1202 warning events every 5 minutes April 19, 2007, 12:31 pm
Logon/Logoff Events in Local Security Log of Terminal Server July 20, 2007, 2:39 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap