NTFS and Hidden File Share access logs

[MarcusDDSK]

Hello,

I am having difficulties accessing a hidden share over our network and I want to go through the event logs to see which share/NTFS rule is blocking which user or user group.

Can I view these access logs via Event Viewer? If yes, how? If no, does anyone know of an application that can do that?

The machines in questions are running Win7 Pro 32-bit.

Thanks,
Marcus

 

[LMiller7]

Welcome to the forum.
I believe that information would only be logged if auditing was enabled. It is not enabled by default.

 

[MarcusDDSK]

Where would I enable that?

I thought I posted the solution earlier, but we solved the problem.

We have a GPO rule in place that all non-admin users within our domain can not access file shares at all. Mapping a network drive to the share solved the issue.

Thank you, LMiller7, for your reply though.

 

[MarcusDDSK]

Hello again,

it seems there's more to it.

We can map a network drive through "My Computer", however, the same does not work through a batch file. Being able to view those logs would really be helpful.

How do I enable the auditing and what do I look for in Event Viewer once it is enabled?

Thank you for your time!