File server audit

Federico Coppola 1,181 Reputation points
2020-10-11T16:53:16.557+00:00

Hi all,
I need to audit company file servers.
In the company there are three file servers and domain users use them through DFS tecnology.

How can I audit file access, download file from file server and more?

Thanks
Federico

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,493 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,546 questions
Windows Server Storage
Windows Server Storage
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Storage: The hardware and software system used to retain data for subsequent retrieval.
621 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vicky Wang 2,636 Reputation points
    2020-10-12T08:51:13.683+00:00

    Hi,
    Enable File and Folder auditing which can be done in two ways:
    Through Group Policy (for Domains, Sites and Organizational Units)
    Local Security policy (for single Servers)
    Configure audit settings for File and Folders
    This article will cover the process of enabling auditing for object access on a Windows Server 2012 through Group Policy.
    reference:https://www.lepide.com/how-to/enable-file-folder-access-auditing-windows-server-2012.html
    Tip: This answer contains the content of a third-party website. Microsoft makes no representations about the content of these websites. We provide this content only for your convenience.
    Best wishes
    Vicky

    0 comments No comments

8 additional answers

Sort by: Most helpful
  1. Dave Patrick 426.1K Reputation points MVP
    2020-10-11T17:27:23.06+00:00

    Something here may help.
    https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/apply-a-basic-audit-policy-on-a-file-or-folder

    you'll likely need to setup on each server's share.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  2. Federico Coppola 1,181 Reputation points
    2020-10-11T21:57:03.843+00:00

    Hello @Dave Patrick ,
    Thanks for your reply.
    I have seen that it is for Windows 10.
    Is it the same on Windows Server 2016?

    After that I have looked for this topic on the web.
    I have seen that it is important set users (or group of users) that we want audit inside "Audit tab".
    It is really common, in a file server, that exists a "main folder" and inside it, there are many shared folders.

    Do you usually set audit for every single folders?

    Thanks so much for your help!
    Federico

    0 comments No comments

  3. Dave Patrick 426.1K Reputation points MVP
    2020-10-11T22:05:22.757+00:00

    Is it the same on Windows Server 2016?

    Yes, the steps are the same.

    Do you usually set audit for every single folders?

    I wouldn't expect this normally. The simpler method would be to apply to this folder, subfolders and files at the top level folder structure.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  4. Federico Coppola 1,181 Reputation points
    2020-10-12T05:10:26.01+00:00

    Dear @Dave Patrick ,
    Thanks so much for your help.
    I will try and I keep you updated.

    Thanks
    Federico

    0 comments No comments