SCOM Auditing

zubair shaikh 1 Reputation point

Dear Team, In my file servers some one has made the changes in permission by giving "Everyone" access on particular folder. Can i monitor and get the logs who has done the changes on the particular server and from which id it is done by adding the file servers in SCOM please suggest. Is Auditing possible through SCOM.

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,277 questions
{count} votes

2 answers

Sort by: Most helpful
  1. CyrAz 5,171 Reputation points

    SCOM can create alerts from any event in the Event Viewer.
    So if you enable auditing (using auditpol or gpo or whatever), you can create a scom rule to alert on these events.

    0 comments No comments

  2. System Center guy 676 Reputation points

    You issue may be relates to How to Monitor File creation/change/Deletions and Permission Changes on Windows File Servers with SCOM 2012 R2

    Hope this will help you.


    0 comments No comments