File Server Monitoring

535irob

I was looking for something to monitor my file server and wanted everyone's input. I want to log when a file was accesses and by whom, also when something is created or deleted from the server. How / what does everyone use to perform these tasks?

TIA

sprkymrk

Enable object access auditing globally either on the file servers local security policy or using a GPO. Then you must enable audting on each individual file/share you want to audit. Be careful not to audit too much (as in heavily used file shares) as it can bring your server down to a crawl. Audit only files/shares that are deemed exceptionally important.

In other words, don't select auditing for the root of C: (and recursively down) for the everyone group. You will lock yourself out of the server.