locked
Windows 2003 Server - How to Audit Remote access to Files RRS feed

  • Question

  •  

    Quick Scenario for you

     

    Suppose you want to migrate data to new locations on your W2k3 box

     

    example

     

    Migrate:-

        E:\UserData to new Volume G:\NewFileStructure\UserData

     

    Now lets assume that there could be Applications\BatchScripts\Users on the network that access E:\UserData by it's administrative Share (\\%SERVER%\E$\UserData) and not it's Manual Share of \\%SERVER%\UserData and I need to track down those Applications\scripts\users. How would I go about that.

     

    I am familiar with Net Session, Net Share and other Sharequery object access commands, but none of them list the actual method of access. So I need something that will tell me when the administrative share on my server is called to access files so that I can update that for the new folder path

    Wednesday, June 13, 2007 1:12 AM

All replies

  • Hi,

     

    wanted to ask - do you need to audit only access to files, or to audit all remote access sessions ?

     

    Our solution audits ALL remote access, I hope you can use it.

     

    thanks

    Uri - Observe-IT

     

    Sunday, November 23, 2008 11:17 AM