RE: Audit Windows files/folders

["James Winzenz" <James.Winzenz () Pulte com>]

Yup, enabling auditing on the folder(s) in question will accomplish what
you want, at no cost.  Only thing to be mindful of is to only enable
auditing for the specific actions you want to catch.  If you enable
auditing for all users against all actions, you will end up getting tons
of events logged, which will make your job more difficult.

James

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Noaman Khan
Sent: Wednesday, April 04, 2007 10:12 AM
To: Tornado
Cc: security-basics () securityfocus com
Subject: Re: Audit Windows files/folders

Hi,

Can't you do that by enabling auditing on windows 2003 ? i think you
should be able to do that.

Thanks

On 4/4/07, Tornado <itsec_guy () bluebottle com> wrote:
> Hi All,
>
> I am looking for some software which will allow me to audit the files
on
> Windows 2003 server. e.g. who deleted the file/folder etc.
>
> Please let me know.Both open source and commercial tools are fine.
>
> Thanks in advance.
 
CONFIDENTIALITY NOTICE:  This email may contain confidential and privileged material for the sole use of the intended 
recipient(s).  Any review, use, distribution or disclosure by others is strictly prohibited.  If you have received this 
communication in error, please notify the sender immediately by email and delete the message and any file attachments 
from your computer.  Thank you.