Chat now with support
Chat with Support

Change Auditor for Windows File Servers 7.0.2 - User Guide

Getting Started

Introduction

Change Auditor for Windows Files Servers enables you to search, report and alert on changes to a specific file, folder, or all drives on a Windows file server. You can receive real-time alerts whenever someone tries to access a secure file or folder on a Windows file server.

Getting started

Create File System Auditing template

For this scenario, we will create a template to audit all changes made to the folder you just created.

1
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.
2
Select View | Administration.
3
Click Auditing.
4
Select File System in the Auditing task list to open the File System Auditing page.
5
Click Add to start the File System Auditing wizard which steps you through the process of creating a File System Auditing template.
Template Name - Enter a name for the template.
Audit Path - Select the Folder option. Enter the name of the folder previously created (i.e., Drive:\Folder\) or click the browse button to select the folder.
By default, the scope of coverage for the selected folder will be This Object and All Child Objects. Leave this setting for this scenario; however, if you wanted to change this setting, use the drop-down arrow in the scope cell.
Events tab - Select both the File Events and Folder Events check boxes (in the header) to track all changes made to the selected folder.
Inclusions tab - Click on the Inclusions tab, enter * and click Add to add it to the Included Names list. Entering * will audit all files and folders in the selected folder.
Exclusions tab - Skip the Exclusions tab. (In this scenario, we will not be excluding any subfolders or files from auditing. For more information on using the Exclusions tab, see File System Auditing.)
8
To create the template and assign it to an agent configuration, expand Finish and select Finish and Assign to Agent Configuration.
The Assigned cell for the template will change to ‘Yes’.
10
Click OK to save your selection, close the dialog and display the Agents Configuration page.
12
On the Agents Configuration page, select the agents assigned to use the modified agent configuration and click Refresh Configuration to ensure the agents are using the latest configuration.
Related Documents