Click here to get back home

Auditing File Access

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Auditing File Access Greg 01-15-2008
Posted by Greg on January 15, 2008, 11:18 am
Please log in for more thread options
Our network has a WS2k PDC and BDC. The file server, Exchange server and SQL
server are all running on WS2003. I need to audit a specific user to see if
they are might be making copies of files they have access to, and taking
them offsite.
I read an article on WS2003 that said "Once the security policy is created,
it can be applied to the baseline server, or any other server in the
organization." Does anybody know if that includes servers running WS2k?
Is there an easy way to accomplish what I need in WS2k?



Posted by Jorge Silva on January 15, 2008, 7:16 pm
Please log in for more thread options
Hi
Yes, 2000 systems also support auditing if that is what you're asking
also have a look:
http://support.microsoft.com/kb/314955
http://support.microsoft.com/kb/314977

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Posted by Al Dunbar on January 17, 2008, 10:35 pm
Please log in for more thread options

> Our network has a WS2k PDC and BDC. The file server, Exchange server and
> SQL
> server are all running on WS2003. I need to audit a specific user to see
> if
> they are might be making copies of files they have access to, and taking
> them offsite.

I'm not sure if auditing will be able to tell the difference between making
a copy of a file and simply opening it in whatever application would be used
to do that. But even if it could tell you that someone copied files to a USB
key, floppy, or burned them to CD, I don't see how it could possibly
determine where the media had been taken.

/Al

> I read an article on WS2003 that said "Once the security policy is
> created,
> it can be applied to the baseline server, or any other server in the
> organization." Does anybody know if that includes servers running WS2k?
> Is there an easy way to accomplish what I need in WS2k?
>
>



Similar ThreadsPosted
File Access Auditing on Exchange 2003 Server June 28, 2005, 4:01 am
How Do We Avoid Auditing Failed SYNCHRONIZE File Access? July 4, 2006, 1:36 am
Enterprise file auditing May 17, 2007, 8:08 pm
Auditing File Share Security February 5, 2007, 3:44 pm
auditing user access September 13, 2007, 8:37 am
File Access Audit on File Server June 20, 2007, 4:59 pm
"The process is unable to access the file, because the file is used by another process." October 29, 2005, 5:17 pm
Cannot access file May 31, 2007, 7:25 pm
Monitor File Access February 12, 2007, 12:09 pm
Restricted file access April 1, 2008, 9:40 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap