Hello
If I set the audit for a drive. where should I see the logs?
if any one access this drive on network with share permission does it have a
record or not? what about terminal service? if one access a drive with terminal
service will it have a record or not?
thanks in advance.
roseta
List
you will see the log in security event logs, be sure to make the eventlog size big enough to handle the load.
It doesn't directly check share permission, but it will audit on the NTFS permissions for shared folder.
Yes this applies to terminal services as well.
--Kamlesh
On 10/17/05, [EMAIL PR
