How to Enable Logging for Host File Edits and General File Edits on Windows Server

Anonymous
2024-07-03T11:26:29+00:00

I need assistance with setting up logging to track edits made to the host file and other file edit events on a Windows Server. I want to ensure that any changes made to these files are recorded in the event logs.

Here are the specific requirements:

  1. Enable logging for edits to the hosts file (C:\Windows\System32\drivers\etc\hosts).
  2. Enable logging for general file edits on specific folders.
  3. View these logs in the Event Viewer.

Could someone provide a detailed guide on how to achieve this using Group Policy and the built-in auditing features in Windows Server?

Thank you in advance for your help!

Windows for business | Windows Server | Windows cloud | Other

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-07-03T12:21:26+00:00

    Hello Saurabh Sutone,

    Thank you for posting in Microsoft Community forum.

    I think this thread is similar to the thread below.

    Host File in Azure Windows VM Gets Blank Intermittently - Microsoft Community

    If so, I will reply to you in that thread.

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    0 comments No comments