Security Basics mailing list archives
RE: Looking for the softwares to monitor our file server
From: "Demi" <hang10z () comcast net>
Date: Tue, 26 Sep 2006 14:56:10 -0400
You can enable auditing on any folder in windows 2003. Just right click on the folder, go to "sharing and security", then "security" tab, at the bottom click on "advanced". Select the auditing tab, click add, select the group or users to track, then pick what actions will be you want to track. IN your case I would select Create files/Write data Success/Fail Create folders / append data Success/Fail Delete Subfolders/Files Success/Fail Delete Suceess/Fail This will log all the info you need in the security event log. It may be a little hard to read at first but I've never needed a 3rd party tool to monitor my file servers. -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Truong duc Luong Sent: Monday, September 25, 2006 2:47 AM To: security-basics () securityfocus com Subject: Looking for the softwares to monitor our file server Hi all, I'm a network manager at smal-size company. We've one file server using Windows 2003 server. I'm only using Event Viewer to log all operation with the file server. Recently, some important data in the file server have been deleted. So, I can't detect when does this operation occurs? And Who do this? To improve the logging capability, i googled and found this software: Alfa File Monitor (http://www.alfasp.com/products.html). It meets with our requirement, but very expensive (1.999 EUR). Do you know any software like Alfa File Monitor (with less price) ? The software can answer quetions: - Who does delete, modify the file server? - When does this occurs? Many thanks, -- No Pain No Gain --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus --------------------------------------------------------------------------- --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- Looking for the softwares to monitor our file server Truong duc Luong (Sep 25)
- RE: Looking for the softwares to monitor our file server Demi (Sep 26)
- RE: Looking for the softwares to monitor our file server Goran Pizent (Sep 26)
- Re: Looking for the softwares to monitor our file server Terry Lowery (Sep 26)
- Re: Looking for the softwares to monitor our file server Ansgar -59cobalt- Wiechers (Sep 26)
- Re: Looking for the softwares to monitor our file server Kenton Smith (Sep 26)
- Re: Looking for the softwares to monitor our file server Lee Fisher (Sep 26)