If you click on the Advanced button when looking at NTFS permissions you can go to the auditing tab and set different types of monitoring. You then have to enable the event auditing by changing the settings using your security policy editor (local security policy, domain security policy, or domain controller security policy). All pertinent details will the show up in the security event log.
Eric -----Original Message----- From: Murtaza Nooruddin [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 20, 2002 1:38 AM To: [EMAIL PROTECTED] Subject: Win2k file share monitor This might sound like a basic admin question. But is it possible in windows 2000 to log or monitor file access (both normal and admin shares) via network. Can this be enabled or disabled, any security risks involved? _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com