Auditing file creation & deletion

[SpuffMonkey]

I need to audit file creation & deletion on a 2003 server - the audit needs to really run over several weeks (if not longer)

 

Can someone point me to a good idiot's guide on how to do this effectively - or to any (cheap) tools that could assist?

 

Thanks

[ChrisH]

You need to turn auditing on in GP if I remember rightly then set up auditing in the advanced properties of folders/volumes.

[SpuffMonkey]

Righty ho - got it all working now - can anyone recommend a noce tool for analysing the logs - I particularly want to see file creations and deletions.

 

I've got EventComb - which is...OK...but would like something better and free if available - any ideas?

 

Thanks

[Geoff]

Congratulations, you've just entered a expensive area of enterprise systems management. You'll have to throw thousand of pounds at for something like that.

[olsench]

My name is Chris Olsen and I am the VP of Product Mgt at STEALTHbits TEchnologies. Check out the StealthAUDIT Data Governance solution as a low cost alternative to those big expensive applications for monitoring file activity. There are no agents to deploy or maintain. We usually run at about 1/8 of the cost of other high priced solutions. We are highly scalable and cater to the black-belt administators like yourself.

[mac_shinobi]

My name is Chris Olsen and I am the VP of Product Mgt at STEALTHbits TEchnologies. Check out the StealthAUDIT Data Governance solution as a low cost alternative to those big expensive applications for monitoring file activity. There are no agents to deploy or maintain. We usually run at about 1/8 of the cost of other high priced solutions. We are highly scalable and cater to the black-belt administators like yourself.

 

any websites or url links ?

[computer_expert]

any websites or url links ?

Public Folder, MS Exchange and Active Directory Auditing Software

 

from the profile info

[Churritos]

There’s a good freeware tool called NetWrix File Server Change Reporter— the tool audits and reports on changes, creations and deletions to files, folders, shares and permissions. Another good option (that is not free) is Quest ChangeAuditor for File Servers.