Jump to content

Guest, which answer was the most helpful?

If any of these replies answered your question, please take a moment to click the 'Mark as solution' button on the post with the best answer.
Marking posts as the solution will help other community members find answers to their questions quickly. Thank you for your help!

Featured Replies

Posted

I have set the file audit modify and delete and which event ID

represent a user have modified or

have deleted the file .I hope to kbow which user have modified and

delete of the special fle

I have set the file audit modify and delete and which event ID

represent a user have modified or

have deleted the file .I hope to kbow which user have modified and

delete of the special fle

"snakesboy" <snakesboys@gmail.com> wrote in message

news:1183716064.137043.208140@o11g2000prd.googlegroups.com...

>I have set the file audit modify and delete and which event ID

> represent a user have modified or

> have deleted the file .I hope to kbow which user have modified and

> delete of the special fle

 

You have to also enable File (i.e., OBJECT Auditing) in the Local

Security Policies or through a GPO.

 

Auditing of files and other objects requires TWO types of settings:

 

1) ACLs on the Files (like permissions but for auditing)

 

2) General enabling of the auditing

 

Both are required.

 

 

--

Herb Martin, MCSE, MVP

http://www.LearnQuick.Com

(phone on web site)

"snakesboy" <snakesboys@gmail.com> wrote in message

news:1183716064.137043.208140@o11g2000prd.googlegroups.com...

>I have set the file audit modify and delete and which event ID

> represent a user have modified or

> have deleted the file .I hope to kbow which user have modified and

> delete of the special fle

 

You have to also enable File (i.e., OBJECT Auditing) in the Local

Security Policies or through a GPO.

 

Auditing of files and other objects requires TWO types of settings:

 

1) ACLs on the Files (like permissions but for auditing)

 

2) General enabling of the auditing

 

Both are required.

 

 

--

Herb Martin, MCSE, MVP

http://www.LearnQuick.Com

(phone on web site)

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...