











CompTIA
Exam Vouchers
Save money on CompTIA exams
| Question of the day
Sign up to receive
interactive practice questions
for MCSE, CompTIA
Cisco and other exams
| TestKing
Get MCSE, MCSD, CCNA, CCNP,A+, N+ and many more | * ExamSheets *
Guide for Success!
Actual Questions & Answers
MCSE, MCSD, A+ ,CCNA, CCNP
Oracle 8i, Oracle 9i Online practice tests
Certification sites Online university Online college Online education Distance learning Software forum Server administration forum Programming resources
|
|  |
BootData
non stop-learning

Registered: Apr 2001 Location: Jakarta Country: Indonesia State: Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree Working on: e-Biz+, Security+
Total Posts: 618
|
|
Audit in win2k?
Hi, I would like to 'audit' my win2k.
assuming I have 10 files in my directory (shared). I need to know who makes changes to the files, when the changes are made and what the authorised user done with the files.
Can anyone tell me how to (if there is such a feature). Is it under Local Security Settings? or..?
Thanks alot for the help 
Report this post to a moderator
|
|
04-09-02 12:25 AM
|
|
mrfixit
Moderator M

Registered: Jul 2001 Location: Fort Worth Country: United States State: Certifications: MCSA , A+, Network+, Security+ Working on: MCSE, CCNA
Total Posts: 2085
|
|
This may be what you are looking for:
quote:
To specify files and folders to audit
In Windows Explorer, right-click the file or folder you want to audit, and then click Properties.
On the Security tab, click Advanced.
On the Auditing tab, click Add.
In the Select User, Computer, or Group dialog box, click the name of the user or group whose actions you want to audit, and then click OK.
In the Auditing Entry dialog box, in Access, click Successful, Failed, or both for the actions you want to be audited, and then click OK.
Note
You must log on as an administrator or as a member of the Administrators group to specify files and folders to audit. Otherwise, in step 2, the Security tab will not appear or will appear in read-only form.
The Security tab is available only for files and folders on NTFS volumes.
Before you can specify files and folders to audit, you must use Group Policy to enable auditing.
Tried for a link, but did not work!
Hope it helps! 
__________________
Keyboard not functioning. Press F1 to continue....
Give a man a fish and you feed him for a day, teach him to use the Net and he won't bother you for weeks.
What goes up must come down. Ask any system administrator.
If a trainstation is where the train stops, what's a workstation...?
Last edited by mrfixit on 04-09-02 at 12:40 AM
Report this post to a moderator
|
|
04-09-02 12:33 AM
|
|
BootData
non stop-learning

Registered: Apr 2001 Location: Jakarta Country: Indonesia State: Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree Working on: e-Biz+, Security+
Total Posts: 618
|
|
thanks mrfixit.
yeah I've done everything.., except I just checked that the HD is in FAT32, not NTFS..
I guess FAT32 doesn't allow me to do the 'full audit'?
cheers,
Report this post to a moderator
|
|
04-09-02 01:14 AM
|
|
BootData
non stop-learning

Registered: Apr 2001 Location: Jakarta Country: Indonesia State: Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree Working on: e-Biz+, Security+
Total Posts: 618
|
|
who and when?
Ooopss.., my fault..
apparently the user told me his PC is win2k advanced user, with NTFS type.
anyway, what my boss asks me to do is to be able to 'trace' who used what file.
example, there is this spreadsheet (.xls) file, and my boss wants to know who makes the changes and when.
thanks again...
Report this post to a moderator
|
|
04-09-02 01:25 AM
|
|
wbafrank
Moderator M

Registered: Nov 2001 Location: Country: Great Britain (UK) State: Certifications: MCP, MCSA, MCSE, MCSD, MCDBA, A+, CCNA, i-Net+, M CIW SD, CIW P, CIW Associate Working on: CCNP (2/4)
Total Posts: 3787
|
|
|
04-09-02 03:46 AM
|
|
|
Click here for the list of 70-210 study guides
MCSE exam notes
70-210 exam details
Forum Rules: Who Can Read The Forum? Any registered user or guest.
Who Can Post New Topics? Any registered user.
Who Can Post Replies? Any registered user.
Changes: Messages can be edited by their author.
Posts: HTML code is OFF. Smilies are ON. vB code is ON. [IMG] code is ON. |
|
ExamNotes forum archive
|