Click here to get back home

FileSystemAuditing doesn't work good

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
FileSystemAuditing doesn't work good Juan 10-17-2006
Posted by Juan on October 17, 2006, 8:34 am
Please log in for more thread options
Hi!

I have enabled auditing for the Everyone group on folders and subfolders for
changing permissions (successfull and failed).

In general it works, but it loggs too much! Everytime I view a permissions
on a folder without changing anything on it a log entry is written.

I was not able to see a difference in the log between changing a permission
and viewing permissions on a folder!

How do you handle this? - Any tipps for me?

Kind regards


Juan

Posted by MPerrault on October 17, 2006, 12:02 pm
Please log in for more thread options

If you are looking for file auditing, take a look at File System
Auditor:

http://www.scriptlogic.com/products/filesystemauditor/

It will give you real time auditoing on who touched what and when. The
good thing about this the info is saved in a DB, and can be sorted and
filtered through by a reporting consol. And there is no overhead
applied to the server.

I think this may be a good option for you. It will definately save
time as well as inconsistancys.

Michael P. Perrault
MCSE, CCNA, A+, MBA
Senior Systems Engineer,
ScriptLogic Corporation

Michael.Perrault@scriptlogic.com
www.scriptlogic.com

> Hi!
>
> I have enabled auditing for the Everyone group on folders and subfolders for
> changing permissions (successfull and failed).
>
> In general it works, but it loggs too much! Everytime I view a permissions
> on a folder without changing anything on it a log entry is written.
>
> I was not able to see a difference in the log between changing a permission
> and viewing permissions on a folder!
>
> How do you handle this? - Any tipps for me?
>
> Kind regards
>
> Juan


Similar ThreadsPosted
Is TrueCrypt good? August 15, 2006, 2:26 pm
Good approach for certificates? January 30, 2007, 7:05 am
Recommendation for a good two-factor authentication product July 25, 2007, 6:58 pm
Please recommend good basic Win Server 2003 R2 security book(s) February 16, 2008, 12:38 pm
How Policies Work November 17, 2006, 2:43 pm
how do I work out who/what enabled a service October 3, 2005, 10:48 pm
revoking ipsec certificate doesn't work September 15, 2005, 4:01 pm
How does runas with /netonly option work? February 8, 2006, 8:12 am
special permissions on folder don't work April 28, 2006, 1:54 am
STOP what you’re doing - It doesn’t work! LT69 July 28, 2006, 7:17 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap