logging of file access in Windows 7
Wherever I read about the new features in Windows 7 it says that one of the new security features is "improved logging of file access".
But I can't find any information of what you can do as an Admin and how you configure it???
I also can't find any function for file access logging inside Windows 7.
Does anyone know what this improved feature is and how to use it?
Best Regards
MårtenB
April 2nd, 2011 1:33pm
But I can't find any information of what you can do as an Admin and how you configure it???
I also can't find any function for file access logging inside Windows 7.
In the Windows Operating System, auditing can be used to monitor and report file access and privilege usage. When an administrator enables auditing and specifies a folder for auditing access, depending on the settings, every succesful and unsuccessful attempt
to access the folder will be logged in the security log of the Windows machine.
More information:
How To Set, View, Change, or Remove Auditing for a File or Folder
How to audit user access of files, folders, and printers
How to enable and apply security auditing
Tip!
As you read through the documentation above, you will find that any user account with administrative privileges can turn auditing off, can circumvent auditing and/or delete auditing events from the security log. When you are not the only administrator, I suggest
you forward events in the security log to a different Windows machine, where you are the only administrator and to which you alone have physical access. More information on Event Forwarding can be found
here.
Does anyone know what this improved feature is and how to use it?
Prior to Windows 7, nine auditing categories existed. In Windows 7, you can now audit using 53 categories. These categories further zoom in on the previous nine categories and provide more granular control of auditing and events in the security
log.
More information:
Advanced Security Audit Policy Step-by-Step Guide
Advanced Security Auditing in Windows 7 and Windows Server 2008 R2
New Windows 7 Auditing
Free Windows Admin Tool Kit Click here and download it now
April 2nd, 2011 5:59pm