Security Basics mailing list archives

RE: How to track who reads/changes files on NT4.0 server in NT4 domain?


From: "David Gillett" <gillettdavid () fhda edu>
Date: Tue, 23 Dec 2003 10:04:45 -0800

  As I recall, once you enable auditing of "object access"
overall, you are then able to select specific objects such
as files and directories and enable auditing on those specific
objects.

Dave Gillett


-----Original Message-----
From: Lewis, John [mailto:LEWISJ () CHARLOTTESVILLE ORG]
Sent: December 23, 2003 07:01
To: 'security-basics () securityfocus com'
Subject: How to track who reads/changes files on NT4.0 server in NT4
domain?


We need the ability to track what users read and change files 
in a specific
directory on a NT 4.0 server in an NT 4.0 domain (not the 
entire server).

I'm not seeing any built-in auditing that will do that.  Is there any
software which will do the monitoring and generate reports?

Thanks.

--
John Lewis
Security Engineer
Information Technology Dept.
City of Charlottesville, VA
434-970-3198



--------------------------------------------------------------
-------------
--------------------------------------------------------------
--------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: