Logging for workstations in a Windows domain Expand / Collapse
Author
Message
Posted 9/27/2010 2:07:44 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 9/27/2010 2:05:01 PM
Posts: 1, Visits: 1
We want to monitor access to secure files on workstations. We'll be looking for attempts to delete objects as well as attempts to open them.

If the file is on a workstation that is part of a domain, do the object access atempts and object deleted messages show up on the domain controller or will they only show up on the workstation?

Thanks,

Amy (altoflyer)

Post #478
Posted 9/29/2010 12:05:25 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
security log events are always logged on the system where they occur.  in your example object access events on secure files on the workstation will show up only in the workstation log.  i suggest you take a look at event forwarding which is available natively in Windows 7 and Vista and I think can be installed on downlevel systems.  http://msdn.microsoft.com/en-us/library/bb427443(v=vs.85).aspx 
Post #479
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 5:34am