Windows Server 2012 R2 Enable File Auditing

To enable file auditing on a file or folder in windows.

Windows server 2012 r2 enable file auditing.

With the right audit policy in place the windows and windows server operating systems generate an audit event each time a user accesses a file. Security auditing is one of the most powerful tools to help maintain the security of an enterprise. Enable auditing at the object level navigate windows explorer to the file you want to monitor. You can then configure global object access auditing so that all access to files marked as sensitive are automatically audited.

How to enable audit policy in windows server 2012. One of the key goals of security audits is regulatory compliance. Right click the file or folder and then click properties. Open the active directory users and computers snap in.

Right click on the target folder file and select properties. To enable auditing through gpo follow these steps. Set up auditing on required files and folders for needed event types. In this window double click administrative tools and then double click group policy management console to open it.

Right click the file and select properties on the tab security click on advanced button switch to the auditing tab and hit the edit button click add to choose users and groups for monitoring. Right click the container housing the domain controller and click properties. Open windows explorer and navigate to the file folder in question. For example using file classification and dac you can configure a windows server 2012 r2 file server so that all files that contain the phrase code secret are marked as sensitive.

File access auditing is not new to windows server 2012. Log on to your domain controller using an administrator account. Go to start control panel. On this example shows to add domain users group.

Locate the file or folder you want to audit in windows explorer. Input username or group name you d like to add auditing and click ok button. Existing file access events 4656 4663 contain information about the attributes of the file that was accessed. Open the property of a share you d like to audit and move to auditing tab and click add button.

3 minutes to read.