Re : Audit Windows files/folders

[abdelhakim aliane <hakim_al () yahoo fr>]

Hi, Microsoft MOM is largely useful in this and other situation.
After enabling file audit on this file/folder, you can try to delete it and see what event ID is logged in Security 
EventLog, then you will set up an event alert in MOM with simply this EventID.
This action is known as : Monitoring Security Events with MOM see 
http://www.microsoft.com/technet/technetmag/issues/2006/09/SecurityEvents/default.aspx

Good Luck (Excuse my bad english)

H Aliane
IT Security

----- Message d'origine ----
De : Scott Ramsdell <Scott.Ramsdell () cellnet com>
À : Tornado <itsec_guy () bluebottle com>; security-basics () securityfocus com
Envoyé le : Lundi, 9 Avril 2007, 22h28mn 25s
Objet : RE: Audit Windows files/folders


Hi,

Simply query your server's event log with a VB script after enabling
auditing.

Kind Regards,

Scott Ramsdell
CISSP, CCNA, MCSE
Security Network Engineer

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tornado
Sent: Thursday, April 05, 2007 12:02 PM
To: security-basics () securityfocus com
Subject: Re: Audit Windows files/folders

Thank you all for your replies. I know there is Auditing feature in
Windows 2003 which will show up in event logs. 
But unfortunately i missed to add this point that we are looking for
some software which will alert us via email when some folder/ file is
deleted. Both open source and commercial tools are fine.

Thanks.

Quoting Tornado <itsec_guy () bluebottle com>:

> Hi All,
>
> I am looking for some software which will allow me to audit the
> files on 
> Windows 2003 server. e.g. who deleted the file/folder etc.
>
> Please let me know.Both open source and commercial tools are fine.
>
> Thanks in advance. 


      
___________________________________________________________________________ 
Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! 
Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses 
http://fr.answers.yahoo.com