Configuring Auditing

You can configure the audit settings and specify the task you want to monitor. For example, if you want to monitor the deletion of important files by unauthorized users, then you can configure the audit settings. This will keep track of the attempts made by any user to delete that file.
To configure auditing policy settings for local file or folder:

1. Select Start > Programs > AccessorIes > Windows Explorer. The My Documents window appears.

2. Right-click the file or folder you want to audit. A shortcut menu appears.

3. Select Properties. The Properties dialog box appears.

4.Click Security tab. The Security tab appears, The Security tab enables to assign the permission for the selected users. You can assign full access to a file or selected permissions to a file.

5. Click Advanced. The Advanced Security Settings dialog box appears.

6. Click Auditing tab. The Auditing tab appears.

The options available in the Auditing tab are as follows:

> Add - Enables to set up auditing for a new user or group

> Edit - Enables to view or modify auditing for an existing user or group

> Remove - Enables to remove auditing for an existing user or group

7. Click Add. The Select User, Computer, or Group dialog box appears.

The options available in the Select User, Computer, or Group dialog box are:

> Locations - Enables to select the required location.

> Object Types - Enables to select the required type of object, such as, users, Groups, and Computers.

> Enter the object name to select - Enables to enter the name of the object. The examples link displays the format in which you can enter the name of the object.

> Check Names - Specifies the correct name of the object that you have entered in the Enter the object name to select text box.

> Advanced- Enables to select the advanced options to search the object.

8. Click Object Types. The Object Types dialog box appears.

9. Select the required object type.

10. Click OK to return to Select User, Computer, or Group dialog box.

11. Enter the object name in the Enter the object name to select text box.

12. Click OK. The Auditing Entry dialog box appears.

The different options available in the Auditing Entry dialog box are:

> Change - Enables to select different username for which you want to assign access.

> Apply onto - Enables to specify where the object is audited

> Clear All - Clears all the selected access permission.

>Apply these auditing entries to objects and/or containers within this container only - Enables to specify whether to apply the auditing to the selection in the Apply onto and all applicable child object

> Access - Displays various types of access permissions. The two options for the access

permissions are:

• Successful - Audits all successful attempts for the required access type

• Failed - Audits all unsuccessful attempts for the required access type

13. Select the required Access to audit successful or unsuccessful attempts.

14. Click OK. The added auditing entry appears.

15. Click OK.