Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Audit (log) Access to Shared Folders


Audit (log) Access to Shared Folders

How to audit user access to shared folders on your computer
Published by Kari
08 Nov 2010
Published by

information   Information

Auditing access to your shared folders makes it possible to keep track of what's happening; who visits your shared folders, when, doing what. It might not be needed on a "Me and my laptop" networks, although in my opinion it adds a bit to general security to your system and network. When needed, the information is there. Auditing logs are very small files, taking almost no space on hard disk. Auditing does not "eat" the resources of your computer, does not make it slower.

Auditing options can be edited using Windows 7 built-in Group Policy Editor, included in Seven Professional, Ultimate and Enterprise editions. There are also several third party alternatives, for instance ShareAlarmPro. This tutorial is however about how to do it with gpedit.







Audit access to shared folders:
  1. Open Group Policy Editor by typing gpedit.msc to Start menu's search field or Run dialog window and hit Enter
    .
  2. Go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies Audit Policy, double click to open Audit Object Access

    -audit_1.png
    .
  3. Check both options (Success and Failure) under Audit these objects, click OK

    Name:  audit_2.png
Views: 19157
Size:  34.4 KB
    .
  4. Close Group Policy Editor
    .
  5. Open the Properties of a shared folder you want to audit, choose Security tab, click Advanced

    Name:  audit_3.png
Views: 19157
Size:  44.1 KB
    .
  6. Choose Audit tab, click Continue

    Name:  audit_4.png
Views: 19185
Size:  50.3 KB
    .
  7. Click Add, click Locations to choose from which location you want to audit, write the computer name and name of a user or group you want to audit, for instance PC-3\Administrators or XPPro-upstairs\Kari. Click Check names to "spellcheck", to check validity of your input

    Name:  audit_5.png
Views: 19534
Size:  82.4 KB
    .
  8. Click OK to close Select User or Group dialog, click OK to close Advanced Security Settings, click OK to close Folder Properties
That's it. To read audit log, open Event Viewer by typing Event Viewer to Start menu's search field or Run dialog window and hit Enter. Go to Windows Logs > Security

-audit_6.png

Any further questions, don't hesitate to ask.

Kari






08 Nov 2010   #1
Bare Foot Kid
Microsoft MVP

W 7 64-bit Ultimate
 
 

Nice work Kari, well done!


My System SpecsSystem Spec
08 Nov 2010   #2
Kari

Microsoft Community Contributor Award Recipient

 

Thanks, Ted. Means a lot coming from you.
My System SpecsSystem Spec
08 Nov 2010   #3
Dinesh

Windows® 8 Pro (64-bit)
 
 

Excellent tutorial mate. I never knew such thing existed.
My System SpecsSystem Spec
.


08 Nov 2010   #4
Kari

Microsoft Community Contributor Award Recipient

 

Thank you, Dinesh.
My System SpecsSystem Spec
08 Nov 2010   #5
Dwarf

Windows 8.1 Pro RTM x64
 
 

Good work, Kari.
My System SpecsSystem Spec
08 Nov 2010   #6
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Very well done!
My System SpecsSystem Spec
08 Nov 2010   #7
Capt.Jack Sparrow

Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
 
 

Great Work Kari !
My System SpecsSystem Spec
09 Nov 2010   #8
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Great tute Kari

A Guy
My System SpecsSystem Spec
10 Nov 2010   #9
Dave76

Microsoft Community Contributor Award Recipient

Windows 7 Ult x64 - SP1/ Windows 8 Pro x64
 
 

Nice tutorial, Good work.
My System SpecsSystem Spec
Comment

 Audit (log) Access to Shared Folders




Tutorial Tools





Similar help and support threads
Windows 7 Tutorial Category
unable to access shared folders on external hdd
I have 2 computers running Windows 7, my home pc and a HTPC I have built. Both are connected to my homegroup. Both are set to workgroup. Both have the advance sharing features set with no password sharing. Attached to the HTPC via usb is an external 2TB drive with media on it. I want to...
Network & Sharing
Can't access Windows 7 shared folders from media box
Hi, I'm using Windows 7 Home Premium 64bit and it's on a network with a Techgear MB902 PVR. I used to be able to watch movies in my W7 shared folders on my TV via the MB902 but after I bought a new PC and installed W7 I've had problems accessing the W7 shared folders. When I connect to my PC...
Network & Sharing
Cannot access Windows 7 shared folders from Ubuntu and MacOSX
I have four machines: A MacBook Pro, a desktop running Ubuntu and two desktops running Windows 7 64bit. To make it easier in describing the issue I am having, let's call my Windows 7 desktops as PC-A and PC-B. I have shared folders in both PC-A and PC-B that are accessible from all machines and...
Network & Sharing
Cant access shared xp folders
workgroup is the same, i can see the xp pc from my w/7 pc but cant access the shared folders, can anyone help
Network & Sharing
Can't access Win 7 shared folders from WinXP
Hey people, I'm new here and I need help really bad... I have 2 pc's - 1 dekstop (win 7) and 1 loptop (win xp). My printer is connected to the dekstop pc, I have shared it successfuly and I can print from my laptop. But when I share hard drive or seperate folders on my dekstop (that runs win7)...
Network & Sharing
cannot access shared folders from my MAC
I have a folder on my Windows box (7232 x64) shared. With build 7100 I was able to access this folder via my Macbook just fine. Now with build 7232 I can no longer mount the share. The macbook says the share is not available. ANy ideas?
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 08:32.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App