Share via

File server audit

Federico Coppola 1,181 Reputation points
2020-10-11T16:53:16.557+00:00

Hi all,
I need to audit company file servers.
In the company there are three file servers and domain users use them through DFS tecnology.

How can I audit file access, download file from file server and more?

Thanks
Federico

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,099 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,244 questions
Windows Server Storage
Windows Server Storage
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Storage: The hardware and software system used to retain data for subsequent retrieval.
643 questions
0 comments
Accepted answer
  1. Vicky Wang 2,646 Reputation points
    2020-10-12T08:51:13.683+00:00

    Hi，
    Enable File and Folder auditing which can be done in two ways:
    Through Group Policy (for Domains, Sites and Organizational Units)
    Local Security policy (for single Servers)
    Configure audit settings for File and Folders
    This article will cover the process of enabling auditing for object access on a Windows Server 2012 through Group Policy.
    reference：https://www.lepide.com/how-to/enable-file-folder-access-auditing-windows-server-2012.html
    Tip: This answer contains the content of a third-party website. Microsoft makes no representations about the content of these websites. We provide this content only for your convenience.
    Best wishes
    Vicky

    0 comments

8 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-10-11T17:27:23.06+00:00

    Something here may help.
    https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/apply-a-basic-audit-policy-on-a-file-or-folder

    you'll likely need to setup on each server's share.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  2. Federico Coppola 1,181 Reputation points
    2020-10-11T21:57:03.843+00:00

    Hello @Anonymous ,
    Thanks for your reply.
    I have seen that it is for Windows 10.
    Is it the same on Windows Server 2016?

    After that I have looked for this topic on the web.
    I have seen that it is important set users (or group of users) that we want audit inside "Audit tab".
    It is really common, in a file server, that exists a "main folder" and inside it, there are many shared folders.

    Do you usually set audit for every single folders?

    Thanks so much for your help!
    Federico

    0 comments
  3. Anonymous
    2020-10-11T22:05:22.757+00:00

    Is it the same on Windows Server 2016?

    Yes, the steps are the same.

    Do you usually set audit for every single folders?

    I wouldn't expect this normally. The simpler method would be to apply to this folder, subfolders and files at the top level folder structure.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments
  4. Federico Coppola 1,181 Reputation points
    2020-10-12T05:10:26.01+00:00

    Dear @Anonymous ,
    Thanks so much for your help.
    I will try and I keep you updated.

    Thanks
    Federico

    0 comments