In this Security Log Secret's real-training webinar I will show you how to audit file access with the Windows Server 2008 security log. I added the "Good, Bad and Ugly" bit because there are a number of gotchas you need to be aware of before launching into a file auditing effort.
I will show you how to enable auditing of just the files you need, for just the types of access and for just the right people. We'll look at auditing for failed attempts to read or modify files, tracking successful modifications of data, file creation, copying and moving.