Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
How to perform File System Auditing against Netlogon?
설명
How do you configure a File System Auditing Template to Audit changes made to the Netlogon contents?
해결 방안
Open the CA Client
Select “Auditing” | “File System” in the Administration Task tab of the Change Auditor client.
Click “Add” or the “Plus” (+) in the button bar menu towards the top.
Enter the desired name for the template in the “Template Name” field.
Select the “Folder” option button
Enter one of the following paths in the “Audit Path” field and click “Add” or down arrow button to the right of the field to move the entry to the audit path list below: - C:\WINDOWS\SYSVOL\domain\scripts - C:\WINDOWS\SYSVOL_DFSR\domain\scripts if using DFSR
Select the required Folder and File events to record in the “Event” tab.
Enter an Asterisk (*) in the “add the file mask to Audit” field in the “Inclusions” tab and click the “Add” button to move the entry to the “Audited Names” list in the lower pane.
Enter any required Exclusions in the “Exclusions” tab and click “Finished”.