If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#1
|
|||
|
|||
Windows file system auditing problem
I need to audit all file+folder creation in my user profile's TEMP folder,
so I added the auditing security attributes as shown at below screenshots. https://i.imgur.com/YJLZPWP.png https://i.imgur.com/OKyECLT.png Note: the file+folder deletion auditing attributes are for testing only. The problem is that, all file/folder creations are not logged. However, file/folder deletion are logged just fine. I used this same method when I was still using Windows XP, and file/folder creations are logged. Group Policy settings are already set up. i.e.: - `Audit: Force audit policy subcategory settings` on *Computer Configuration Windows Settings Security Settings Local Policies Security Options* is set to `Enabled`. - `Audit File System` on *Computer Configuration Windows Settings Security Settings Advanced Audit Policy Configuration System Audit Policies Object Access* is set to `Configure the following audit events` with `Success` checkbox ticked. |
Ads |
Thread Tools | |
Display Modes | Rate This Thread |
|
|