Object Auditing in Windows Server 2003

[pancho619]

Can someone explain in simple terms how to enable/set the object auditing feature in Windows Server 2003, I have users who keep deleting/moving folders "by accident" and I need to track who they are. Any help would be greatly appreciated. Thanks in advance.

-- Frank

 

[stash]

It's a two-step process. You have to enable auditing in group policy, and then set a SACL (auditing entry) on the file or folder you want to audit.

This article is for Windows 2000, but it should be the same on 2003: http://support.microsoft.com/kb/300549

 

[pancho619]

Thanks Stash, I will read through that.