Use Auditing To Track Changes to Shared Folders

by Eric Geier [Published on 6 Sept. 2011 / Last Updated on 6 Sept. 2011]

Changes to folders and files in shared folders can be logged in the Event Viewer.

If you host shared folders on a network you might want to enable auditing on those directories so you can see who makes changes via the Event Viewer. For example, you might want to see who deletes files or folders, especially if it wasn’t wanted as there is no recycle bin support for shared folders.

Here’s how to enable Auditing:

  1. Right click the file or folder you wish to track and click Properties.
  2. Select the Security tab and click the Advanced button.
  3. Select the Auditing tab and click Edit.
  4. Click Add and choose the members of the domain you want to monitor, or enter “everyone” to track all users, and then click OK.
  5. Select what you want to audit and click OK.
  6. Click OK on the dialogs.

See Also

The Author — Eric Geier

Eric Geier (Dayton, Ohio) is a Freelance  Tech Writer and Author specializing in computer networking. He's also the Founder and Owner of NoWiresSecurity, which provides a hosted cloud-based RADIUS service to help businesses easily secure their Wi-Fi networks with the Enterprise (802.1X) mode of WPA/WPA2 security. He’s also the Founder and Owner of On Spot Techs, which provides on-site computer and technology services.

Featured Links