Need a program to log access in a NT 4.0 Domain

[ndee]

Hi there,
I need a program which logs EVERY access to EVERY file that is made on our fileserver. The problem is, some Documents just dissapear and we have no idea WHO deletes those documents. I tried google but I really don't know how to phrase a good search string for my problem.

If you have any questions, just ask.

Thanks in advance

ndee

 

[wlee]

You could enable auditing on the folders/shares that you're losing files from. It would show up in the event viewer under "security".

 

[wlee]

BTW, this is how you do it.

http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=14761


Security / John Savill December 22, 1999
Q. How do I enable auditing on certain files/directories?
A. A. Auditing is only available on NTFS volumes. Follow the instructions below:

Start Explorer
Right click on the file/directory you want to audit, and from the context menu select properties
Select the Security tab and click Auditing
If you have selected a directory, check the "replace auditing on subdirectories"
Click the Add button and add the user(s) who you wish to audit by selecting and clicking Add. When finished adding users, click OK
Select the events you wish to audit and then click OK
You must ensure that File access auditing is enabled (Start - Programs - Administrative Tools - User Manager - Policies - Audit).

These events can then be viewed using the Event Viewer (Start - Programs - Administrative Tools - Event Viewer - Log - Security)

 

[ndee]

thanks! I figured that out, but the problem is, the log gets pretty big, pretty fast hehe, but that was exactly what I was looking for. Do you know if it's possible to enable the IP logging? That I can see which computer accessed the file?