Windows 2003 Server - How to Audit Remote access to Files RRS feed

  • Question


    Quick Scenario for you


    Suppose you want to migrate data to new locations on your W2k3 box





        E:\UserData to new Volume G:\NewFileStructure\UserData


    Now lets assume that there could be Applications\BatchScripts\Users on the network that access E:\UserData by it's administrative Share (\\%SERVER%\E$\UserData) and not it's Manual Share of \\%SERVER%\UserData and I need to track down those Applications\scripts\users. How would I go about that.


    I am familiar with Net Session, Net Share and other Sharequery object access commands, but none of them list the actual method of access. So I need something that will tell me when the administrative share on my server is called to access files so that I can update that for the new folder path

    Wednesday, June 13, 2007 1:12 AM

All replies

  • Hi,


    wanted to ask - do you need to audit only access to files, or to audit all remote access sessions ?


    Our solution audits ALL remote access, I hope you can use it.



    Uri - Observe-IT


    Sunday, November 23, 2008 11:17 AM