Share via

SCOM Auditing

zubair shaikh 1 Reputation point
2021-03-09T08:46:51.84+00:00

Dear Team, In my file servers some one has made the changes in permission by giving "Everyone" access on particular folder. Can i monitor and get the logs who has done the changes on the particular server and from which id it is done by adding the file servers in SCOM please suggest. Is Auditing possible through SCOM.

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,519 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. CyrAz 5,181 Reputation points
    2021-03-10T10:05:00.863+00:00

    SCOM can create alerts from any event in the Event Viewer.
    So if you enable auditing (using auditpol or gpo or whatever), you can create a scom rule to alert on these events.

    0 comments
  2. System Center guy 691 Reputation points
    2021-03-15T09:38:07.223+00:00

    You issue may be relates to How to Monitor File creation/change/Deletions and Permission Changes on Windows File Servers with SCOM 2012 R2
    https://learn.microsoft.com/en-us/answers/questions/273270/how-to-monitor-file-creationchangedeletions-and-pe.html.

    Hope this will help you.

    Roger

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.