Shoot, your right we did deploy a gpo last week, but I bet theres a propagation error on that because we have been working through a few issues with deploying GPO's system wide. I bet that's it..
Thanks -----Original Message----- From: Ben Scott [mailto:[email protected]] Sent: Monday, June 20, 2011 10:38 PM To: NT System Admin Issues Subject: Re: security auditing.. On Mon, Jun 20, 2011 at 9:53 PM, Level 5 Lists <[email protected]> wrote: > I must be missing something .. I have a share drive w @ 400gb of user data. > I enabled Delete files/folders auditing for everyone and pushed it > through all sub-folders. if I go into a folder delete a file then goto > event logs Im expecting to see an event but I am not seeing one. Do you also have Filesystem auditing turned on system wide? You need that or the SACLs on NTFS objects are ignored. It's an option under Group Policy Editor and/or Local Security Policy. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
