A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows 7 » Windows 7 Forum
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Windows file system auditing problem



 
 
Thread Tools Rate Thread Display Modes
  #1  
Old September 25th 18, 05:02 PM posted to alt.windows7.general
JJ[_11_]
external usenet poster
 
Posts: 744
Default Windows file system auditing problem

I need to audit all file+folder creation in my user profile's TEMP folder,
so I added the auditing security attributes as shown at below screenshots.

https://i.imgur.com/YJLZPWP.png

https://i.imgur.com/OKyECLT.png

Note: the file+folder deletion auditing attributes are for testing only.

The problem is that, all file/folder creations are not logged. However,
file/folder deletion are logged just fine.

I used this same method when I was still using Windows XP, and file/folder
creations are logged.

Group Policy settings are already set up. i.e.:

- `Audit: Force audit policy subcategory settings` on *Computer
Configuration Windows Settings Security Settings Local Policies
Security Options* is set to `Enabled`.

- `Audit File System` on *Computer Configuration Windows Settings
Security Settings Advanced Audit Policy Configuration System Audit
Policies Object Access* is set to `Configure the following audit events`
with `Success` checkbox ticked.
Ads
 




Thread Tools
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off






All times are GMT +1. The time now is 06:08 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.