file share auditing help

Nick119

Member
Oct 30, 2005
146
0
0
Hey guys -

I was just wondering if any of you guys here know any type of tool or software that will monitor specific file shares and generate permission reports of all the directories and also monitor any time permissions are changed. It'd also be nice to have a feature that has a capability of monitoring the files themselves, ie when they get deleted moved etc.

We've been having some issues with files being mysteriously deleted and no one knows anything.

We're running active directory and windows 2003. The end-user's machines are all XP. If you need any other information or need me to clarify what I'm looking for please let me know.

I really really appreciate your help. Thanks so much in advance.
 

Nick119

Member
Oct 30, 2005
146
0
0
Windows does not have built in file share auditing. If i wanted to generate a report on all the users and groups on a file share, sure I can create a vbscript using CACLs and do it but it doesn't come out with the format that is necessary. I'm looking for a third party tool that does all of the above. I know the exist I'm just not sure where to look. Any help would be appreciated.
 

Crusty

Lifer
Sep 30, 2001
12,684
2
81
Right Click the folder -> Properties -> Security -> Advanced -> Auditing

The events show up in the event viewer and it's fairly trivial to write a reporting engine using SQL server and IIS.
 

Crusty

Lifer
Sep 30, 2001
12,684
2
81
Fairly certain it's been standard since at least server 2000, at least thats the first time I remember using it. I just checked on newish server 2008 install and it's there by default.