ExamNotes.net  -  IT certification portal

ForumsCertResearchTop sitesNewslettersFree email
HomeRegister
Exams Notes
Practice exams
Exam games
Questions by email
Online training
Training videos
College degrees
Boot camps
Book store
Links directory
Tell a friend
For webmasters

CompTIA Exam Vouchers
Save money on CompTIA exams
Question of the day
Sign up to receive
interactive practice questions
for MCSE, CompTIA
Cisco and other exams
TestKing
Get MCSE, MCSD, CCNA, CCNP,A+, N+ and many more

* ExamSheets *
Guide for Success!
Actual Questions & Answers
MCSE, MCSD, A+ ,CCNA, CCNP
Oracle 8i, Oracle 9i

Online practice tests

Certification sites

Online university

Online college

Online education

Distance learning

Software forum

Server administration forum

Programming resources






This is interesting: Free IT Magazines | Databases help forum



Microsoft (MCSE, MCSD, MOUS, MCAD) > 70-210 > Audit in win2k?

Show a Printable Version
Email This Page to Someone!
Receive updates to this thread


Featured site: Online 70-210 practice exams from Cert21.com



Author Audit in win2k?
BootData
non stop-learning




Registered: Apr 2001
Location: Jakarta
Country: Indonesia
State:
Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree
Working on: e-Biz+, Security+

Total Posts: 618
Audit in win2k?

Hi, I would like to 'audit' my win2k.
assuming I have 10 files in my directory (shared). I need to know who makes changes to the files, when the changes are made and what the authorised user done with the files.

Can anyone tell me how to (if there is such a feature). Is it under Local Security Settings? or..?

Thanks alot for the help

Report this post to a moderator

Old Post 04-09-02 12:25 AM
BootData is offline Click Here to See the Profile for BootData Add BootData to your buddy list Find more posts by BootData Reply w/Quote Edit/Delete Message IP: Logged
mrfixit
Moderator
M




Registered: Jul 2001
Location: Fort Worth
Country: United States
State:
Certifications: MCSA , A+, Network+, Security+
Working on: MCSE, CCNA

Total Posts: 2085

This may be what you are looking for:

quote:


To specify files and folders to audit

In Windows Explorer, right-click the file or folder you want to audit, and then click Properties.
On the Security tab, click Advanced.
On the Auditing tab, click Add.
In the Select User, Computer, or Group dialog box, click the name of the user or group whose actions you want to audit, and then click OK.
In the Auditing Entry dialog box, in Access, click Successful, Failed, or both for the actions you want to be audited, and then click OK.
Note

You must log on as an administrator or as a member of the Administrators group to specify files and folders to audit. Otherwise, in step 2, the Security tab will not appear or will appear in read-only form.
The Security tab is available only for files and folders on NTFS volumes.
Before you can specify files and folders to audit, you must use Group Policy to enable auditing.


Tried for a link, but did not work!

Hope it helps!

__________________
Keyboard not functioning. Press F1 to continue....

Give a man a fish and you feed him for a day, teach him to use the Net and he won't bother you for weeks.

What goes up must come down. Ask any system administrator.

If a trainstation is where the train stops, what's a workstation...?

Last edited by mrfixit on 04-09-02 at 12:40 AM

Report this post to a moderator

Old Post 04-09-02 12:33 AM
mrfixit is offline Click Here to See the Profile for mrfixit Click here to Send mrfixit a Private Message Add mrfixit to your buddy list Find more posts by mrfixit Reply w/Quote Edit/Delete Message IP: Logged
BootData
non stop-learning




Registered: Apr 2001
Location: Jakarta
Country: Indonesia
State:
Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree
Working on: e-Biz+, Security+

Total Posts: 618

thanks mrfixit.

yeah I've done everything.., except I just checked that the HD is in FAT32, not NTFS..
I guess FAT32 doesn't allow me to do the 'full audit'?

cheers,

Report this post to a moderator

Old Post 04-09-02 01:14 AM
BootData is offline Click Here to See the Profile for BootData Add BootData to your buddy list Find more posts by BootData Reply w/Quote Edit/Delete Message IP: Logged
BootData
non stop-learning




Registered: Apr 2001
Location: Jakarta
Country: Indonesia
State:
Certifications: CCDA, MCSA, MCIWD, CCA, I+, N+, CNS, CIW Security, Master's Degree
Working on: e-Biz+, Security+

Total Posts: 618
who and when?

Ooopss.., my fault..
apparently the user told me his PC is win2k advanced user, with NTFS type.

anyway, what my boss asks me to do is to be able to 'trace' who used what file.
example, there is this spreadsheet (.xls) file, and my boss wants to know who makes the changes and when.

thanks again...

Report this post to a moderator

Old Post 04-09-02 01:25 AM
BootData is offline Click Here to See the Profile for BootData Add BootData to your buddy list Find more posts by BootData Reply w/Quote Edit/Delete Message IP: Logged
wbafrank
Moderator
M




Registered: Nov 2001
Location:
Country: Great Britain (UK)
State:
Certifications: MCP, MCSA, MCSE, MCSD, MCDBA, A+, CCNA, i-Net+, M CIW SD, CIW P, CIW Associate
Working on: CCNP (2/4)

Total Posts: 3787
Wink Who and When ..........

Doing this will tell you ....

http://support.microsoft.com/defaul...b;EN-US;q300549

__________________
One Exam leads to another! Where will it ever end?

Report this post to a moderator

Old Post 04-09-02 03:46 AM
wbafrank is offline Click Here to See the Profile for wbafrank Click here to Send wbafrank a Private Message Add wbafrank to your buddy list Find more posts by wbafrank Reply w/Quote Edit/Delete Message IP: Logged
All times are GMT.
Post new thread   Post reply

Click here for the list of 70-210 study guides

MCSE exam notes

70-210 exam details



Forum Jump:
Rate This Thread:
Forum Rules:
Who Can Read The Forum? Any registered user or guest.
Who Can Post New Topics? Any registered user.
Who Can Post Replies? Any registered user.
Changes: Messages can be edited by their author.
Posts: HTML code is OFF. Smilies are ON. vB code is ON. [IMG] code is ON.
 

ExamNotes forum archive


Powered by: vBulletin 2.2.8
Copyright ©2000, Jelsoft Enterprises Limited.

  Free Braindumps | mcse braindumps