Sunday, September 26, 2010

Trouble configuring auditing

You are on the phone with Arin who is having a problem configuring auditing on his computer. He wants to configure auditing because he believes someone has access to the secure files on his computer. He configured audit settings on his secure documents, but no audit log is generated. Arin is the administrator of his computer and no other users use his computer. What should you tell Arin?

The security policy applied to the computer does not allow auditing file access. It is likely the auditing of files is disabled. The security policy could be a local, site, domain, or OU policy. Arin should run the RSOP (Resultant Set of Policy) mode to determine the policy settings applied to the computer. The "Audit Object Access" should be enabled.
Enhanced by Zemanta

No comments:

Post a Comment

"Comment As:" anonymous if you would rather not sign into an account!