InstantForum.NET v4.1.4UltimateWindowsSecurity.com Forumhttp://forum.ultimatewindowssecurity.com/noreply@ultimatewindowssecurity.comThu, 17 May 2012 09:08:45 GMT20http://forum.ultimatewindowssecurity.com/Topic413-9-1.aspxThat's as far as the native security log will take you. Beyond that you would need something like Quest's ChangeAuditor for Windows File ServersSun, 01 Aug 2010 07:43:30 GMTRandyFranklinSmithhttp://forum.ultimatewindowssecurity.com/Topic413-9-1.aspxHi,</P><P>I was wondering if anybody has any pointers on how to do "detailed" folder auditing. I am aware of enable object auditing policies and setting up Change Permission and Take Ownership on the actual folder. I am interested in determining "who" granted/revoked "what" to "whom" and "when".</P><P>So if an IT admin grants permission to a folder to a user, I'd like to be able to see the details of that activity in the event log (Windows 2003). I currently see events 560, but this only tells me a DAC was changed... how do I monitor the details of what was changed via the event log and my SIEM?</P><P>Thanks!Thu, 08 Jul 2010 13:36:03 GMTsecurity.guy