R
ru12345
When auditing is turned on (Object level), and I open a file in Notepad, I
see entries for the explorer visit to the directory (e.g. C:\Temp\Files) but
not an entry with the file name (C:\Temp\Files\Myfile.txt). I have turned on
object access auditing (full control for the directory and all subs). What
am I missing? Ideally, I'd just like file access audit records and not
directory traversals at all.
see entries for the explorer visit to the directory (e.g. C:\Temp\Files) but
not an entry with the file name (C:\Temp\Files\Myfile.txt). I have turned on
object access auditing (full control for the directory and all subs). What
am I missing? Ideally, I'd just like file access audit records and not
directory traversals at all.