Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Audit (log) Access to Shared Folders



Audit (log) Access to Shared Folders

How to audit user access to shared folders on your computer
Published by Kari
08 Nov 2010
Published by

information   Information

Auditing access to your shared folders makes it possible to keep track of what's happening; who visits your shared folders, when, doing what. It might not be needed on a "Me and my laptop" networks, although in my opinion it adds a bit to general security to your system and network. When needed, the information is there. Auditing logs are very small files, taking almost no space on hard disk. Auditing does not "eat" the resources of your computer, does not make it slower.

Auditing options can be edited using Windows 7 built-in Group Policy Editor, included in Seven Professional, Ultimate and Enterprise editions. There are also several third party alternatives, for instance ShareAlarmPro. This tutorial is however about how to do it with gpedit.






Audit access to shared folders:
  1. Open Group Policy Editor by typing gpedit.msc to Start menu's search field or Run dialog window and hit Enter
    .
  2. Go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies Audit Policy, double click to open Audit Object Access

    Audit (log) Access to Shared Folders-audit_1.png
    .
  3. Check both options (Success and Failure) under Audit these objects, click OK

    Name:  audit_2.png
Views: 7309
Size:  34.4 KB
    .
  4. Close Group Policy Editor
    .
  5. Open the Properties of a shared folder you want to audit, choose Security tab, click Advanced

    Name:  audit_3.png
Views: 7262
Size:  44.1 KB
    .
  6. Choose Audit tab, click Continue

    Name:  audit_4.png
Views: 7342
Size:  50.3 KB
    .
  7. Click Add, click Locations to choose from which location you want to audit, write the computer name and name of a user or group you want to audit, for instance PC-3\Administrators or XPPro-upstairs\Kari. Click Check names to "spellcheck", to check validity of your input

    Name:  audit_5.png
Views: 7682
Size:  82.4 KB
    .
  8. Click OK to close Select User or Group dialog, click OK to close Advanced Security Settings, click OK to close Folder Properties
That's it. To read audit log, open Event Viewer by typing Event Viewer to Start menu's search field or Run dialog window and hit Enter. Go to Windows Logs > Security

Audit (log) Access to Shared Folders-audit_6.png

Any further questions, don't hesitate to ask.

Kari





.

08 Nov 2010   #1
Bare Foot Kid
Microsoft MVP

W 7 64-bit Ultimate
 
 

Nice work Kari, well done!

My System SpecsSystem Spec
.

08 Nov 2010   #2
Kari

Microsoft Community Contributor Award Recipient

Windows 8.1 Pro with Media Center
 
 

Thanks, Ted. Means a lot coming from you.
My System SpecsSystem Spec
08 Nov 2010   #3
Dinesh

Windows® 8 Pro (64-bit)
 
 

Excellent tutorial mate. I never knew such thing existed.
My System SpecsSystem Spec
08 Nov 2010   #4
Kari

Microsoft Community Contributor Award Recipient

Windows 8.1 Pro with Media Center
 
 

Thank you, Dinesh.
My System SpecsSystem Spec
08 Nov 2010   #5
Dwarf

Windows 8.1 Pro RTM x64
 
 

Good work, Kari.
My System SpecsSystem Spec
08 Nov 2010   #6
WindowsStar

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)
 
 

Very well done!
My System SpecsSystem Spec
08 Nov 2010   #7
Capt.Jack Sparrow

Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit
 
 

Great Work Kari !
My System SpecsSystem Spec
09 Nov 2010   #8
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1
 
 

Great tute Kari

A Guy
My System SpecsSystem Spec
10 Nov 2010   #9
Dave76

Microsoft Community Contributor Award Recipient

Windows 7 Ult x64 - SP1/ Windows 8 Pro x64
 
 

Nice tutorial, Good work.
My System SpecsSystem Spec
Comment

 Audit (log) Access to Shared Folders




Tutorial Tools



Similar help and support threads for2: Audit (log) Access to Shared Folders
Windows 7 Tutorial Category
unable to access shared folders on external hdd Network & Sharing
Authentification on access shared folders Network & Sharing
Remove shared folders without removing access. Network & Sharing
Cant access shared folders and files incl shared printer on XP home pc Network & Sharing
Cant access shared xp folders Network & Sharing
Can't access Win 7 shared folders from WinXP Network & Sharing
cannot access shared folders from my MAC Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 03:42 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33