Windows Folder Auditing

[timbo343]

WE are to be setting up windows file auditing. I know how to set it up and how to get it to work (right click on the folder > Properties > Security > Advanced > Auditing tab) but i can't seem to find out where the logs are stored.

 

Can anyone Help?

 

Thanks

 

Tim

[powdarrmonkey]

I thought they went into the Event Viewer, but IMBW.

[timbo343]

Whats the IMBW?

[timbo343]

I know, "I May Be Wrong" tut..

[powdarrmonkey]

Sorry

[SpuffMonkey]

Yep - events database it is - though its not easy to read - you'll need a third party bit of software to make it "useful" - like

 

System Change Log

 

which is what we use