Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Audit (log) Access to Shared Folders

Audit (log) Access to Shared Folders

How to audit user access to shared folders on your computer
Published by Kari
08 Nov 2010
Published by

information   Information

Auditing access to your shared folders makes it possible to keep track of what's happening; who visits your shared folders, when, doing what. It might not be needed on a "Me and my laptop" networks, although in my opinion it adds a bit to general security to your system and network. When needed, the information is there. Auditing logs are very small files, taking almost no space on hard disk. Auditing does not "eat" the resources of your computer, does not make it slower.

Auditing options can be edited using Windows 7 built-in Group Policy Editor, included in Seven Professional, Ultimate and Enterprise editions. There are also several third party alternatives, for instance ShareAlarmPro. This tutorial is however about how to do it with gpedit.

Audit access to shared folders:
  1. Open Group Policy Editor by typing gpedit.msc to Start menu's search field or Run dialog window and hit Enter
  2. Go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies Audit Policy, double click to open Audit Object Access

    Audit (log) Access to Shared Folders-audit_1.png
  3. Check both options (Success and Failure) under Audit these objects, click OK

    Audit (log) Access to Shared Folders-audit_2.png
  4. Close Group Policy Editor
  5. Open the Properties of a shared folder you want to audit, choose Security tab, click Advanced

    Audit (log) Access to Shared Folders-audit_3.png
  6. Choose Audit tab, click Continue

    Audit (log) Access to Shared Folders-audit_4.png
  7. Click Add, click Locations to choose from which location you want to audit, write the computer name and name of a user or group you want to audit, for instance PC-3\Administrators or XPPro-upstairs\Kari. Click Check names to "spellcheck", to check validity of your input

    Audit (log) Access to Shared Folders-audit_5.png
  8. Click OK to close Select User or Group dialog, click OK to close Advanced Security Settings, click OK to close Folder Properties
That's it. To read audit log, open Event Viewer by typing Event Viewer to Start menu's search field or Run dialog window and hit Enter. Go to Windows Logs > Security

Audit (log) Access to Shared Folders-audit_6.png

Any further questions, don't hesitate to ask.


08 Nov 2010   #1
Bare Foot Kid
Microsoft MVP

W 7 64-bit Ultimate

Nice work Kari, well done!

My System SpecsSystem Spec
08 Nov 2010   #2

Microsoft Community Contributor Award Recipient


Thanks, Ted. Means a lot coming from you.
My System SpecsSystem Spec
08 Nov 2010   #3

Windows® 8 Pro (64-bit)

Excellent tutorial mate. I never knew such thing existed.
My System SpecsSystem Spec

08 Nov 2010   #4

Microsoft Community Contributor Award Recipient


Thank you, Dinesh.
My System SpecsSystem Spec
08 Nov 2010   #5

Windows 8.1 Pro RTM x64

Good work, Kari.
My System SpecsSystem Spec
08 Nov 2010   #6

Windows 7 Enterprise (x64); Windows Server 2008 R2 (x64)

Very well done!
My System SpecsSystem Spec
08 Nov 2010   #7
Capt.Jack Sparrow

Windows 7 Ultimate - 64-bit | Windows 8 Pro - 64-bit

Great Work Kari !
My System SpecsSystem Spec
09 Nov 2010   #8
A Guy

Microsoft Community Contributor Award Recipient

Windows 7 Home Premium x64 SP1

Great tute Kari

A Guy
My System SpecsSystem Spec
10 Nov 2010   #9

Microsoft Community Contributor Award Recipient

Windows 7 Ult x64 - SP1/ Windows 8 Pro x64

Nice tutorial, Good work.
My System SpecsSystem Spec

 Audit (log) Access to Shared Folders

Thread Tools

Similar help and support threads
Thread Forum
unable to access shared folders on external hdd
I have 2 computers running Windows 7, my home pc and a HTPC I have built. Both are connected to my homegroup. Both are set to workgroup. Both have the advance sharing features set with no password sharing. Attached to the HTPC via usb is an external 2TB drive with media on it. I want to...
Network & Sharing
Can't access Windows 7 shared folders from media box
Hi, I'm using Windows 7 Home Premium 64bit and it's on a network with a Techgear MB902 PVR. I used to be able to watch movies in my W7 shared folders on my TV via the MB902 but after I bought a new PC and installed W7 I've had problems accessing the W7 shared folders. When I connect to my PC...
Network & Sharing
Cannot access Windows 7 shared folders from Ubuntu and MacOSX
I have four machines: A MacBook Pro, a desktop running Ubuntu and two desktops running Windows 7 64bit. To make it easier in describing the issue I am having, let's call my Windows 7 desktops as PC-A and PC-B. I have shared folders in both PC-A and PC-B that are accessible from all machines and...
Network & Sharing
Cant access shared xp folders
workgroup is the same, i can see the xp pc from my w/7 pc but cant access the shared folders, can anyone help
Network & Sharing
Can't access Win 7 shared folders from WinXP
Hey people, I'm new here and I need help really bad... I have 2 pc's - 1 dekstop (win 7) and 1 loptop (win xp). My printer is connected to the dekstop pc, I have shared it successfuly and I can print from my laptop. But when I share hard drive or seperate folders on my dekstop (that runs win7)...
Network & Sharing
cannot access shared folders from my MAC
I have a folder on my Windows box (7232 x64) shared. With build 7100 I was able to access this folder via my Macbook just fine. Now with build 7232 I can no longer mount the share. The macbook says the share is not available. ANy ideas?
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 14:36.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App