Email Notification when NTFS perms are changed

[RabbieBurns]

is there a way in 2008R2, using FSRM or such, or even a 3rd party software, that will let me get an email notification if NTFS permisisons are changed on certain folders?

[nephilim]

yes there is a way with FSRM but its too late for me to think. It worked on 2003R2 and 2008(standard) so I can't see why it wouldn't work on 2008r2...will post up when I have time tomorrow morning

[RabbieBurns]

[msmom] Monitor Changes to NTFS Permissions on File Share [osd0he4] - MOM-OpsMgr Email Discussion List Archive

that thread there seems to detail how to do the logging, but im not sure how to turn these events into emails?

[RabbieBurns]

[msmom] Monitor Changes to NTFS Permissions on File Share [osd0he4] - MOM-OpsMgr Email Discussion List Archive

that thread there seems to detail how to do the logging, but im not sure how to turn these events into emails?

[RabbieBurns]

hmm didnt realise I posted that twice, but @nephilim, you got any ideas?

[nephilim]

Cant think...I know I have done it before but just cant remember how, if I had the access to the machines I could tell you lol

[RabbieBurns]

anyone?

cant find much of this on google at all and really need to have something sorted soon for the exec

[RabbieBurns]

How to use Eventtriggers.exe to send e-mail based on Event IDs

Think this might be what im looking for.. but I cant figure out where the 'eventtrigger.exe' comes from?

'eventtriggers' is not recognized as an internal or external command,

Eventtriggers

[RabbieBurns]

ok seems it was replaced in 2008 with Custom Tasks

Assigning Custom Tasks to Events in Vista

[RabbieBurns]

bah set it all up but cannot get an email to send... the event seems to trigger and run but im not receiving any mail.... im sure ive got the send connector configured in the mailserver as other services send email from this fileserver (fsrm etc)

[RabbieBurns]

Additional Data: Error Value: 2147746321.

seems this is quite a common error on google lots of questions about it not so many solutions...

[RabbieBurns]

aha figured it out :P)

I had made an anon relay, but as the task was executing under a user account, i had to give that user permission on the send connector.

OK so go this working on a test event, now to get it sorted for NTFS permissions...

Thanks for the help RabbieBurns. And for nephilim for making me persevere in my research by saying its possible. Midnight on the dot. Thankyou and goodnight.

[RabbieBurns]

[msmom] Monitor Changes to NTFS Permissions on File Share [osd0he4] - MOM-OpsMgr Email Discussion List Archive

that thread there seems to detail how to do the logging, but im not sure how to turn these events into emails?

Hmm Ive enabled auditing on my own folder to test but I cannot seem to generate any event logs... are these steps correct for the enabling of the auditing?

[nephilim]

Yes they are correct...are you doing it on the same account that you made the auditing steps with? If so it wont work!

[RabbieBurns]

Im making the changes to policies etc with my own account.. but a colleague in the other office is then messing with the NTFS permissions with their own account to try to generate the log events but none are appearing..

Ive followed this to the T as well...

https://social.technet.microsoft.com...-19e15175a764/