|
Posted by Roger Abell [MVP] on May 28, 2007, 4:00 pm
Please log in for more thread options
Tell us what audit settings you are using for files.
For example, audit Full Control success by Everyone.
>
> Hi,
>
> i am trying to using audit poliy for files and folder (in win2003
> domain)..
>
> i saw security events successufully about accessed files (who accessed,
> when
> accessed, ..) also true location and file name; for example
> D:\new folder\document.doc
>
> but i couldn't see file name when i deleted any file; i just saw that
> "explore.exe" as file name :(
> for example
> D:\new folder\explorer.exe
>
> i want to see that deleted file names when a user delet it truly...
>
> What can i do ?
>
> Thanks for everythings...
|