Clearly the easier option, Lepide’s File Server auditing software can help you keep track of all the files and folders on your Windows File Servers.Windows 11 22H2 Upgrade using SCCM Feature Update Option 3.1
In this article, you have seen how to keep track of all files and folders activities on your Windows File Server using both native methods and Lepide File Server Auditor. Answers to all relevant audit questions, such as “who, what, when and where” are available in a single line record. In the above image, we have highlighted the record which contains the information about where a file was created. All the necessary information related to the create event is shown in a single line record. You can filter the records by any column including file name, creation time, user name and any other available column. The following image shows the files and folders creation report.
You just have to install the solution, configure the audit settings once and you are good to go. Unlike Native Auditing, you do not have to manually enable the auditing for different files and folders. Lepide File Server Auditor (part of Lepide Data Security Platform) can be used to track all file and the folder activities of users. Track File and Folder Activities Easily with Lepide File Server Auditor Click “Apply” and “OK” to close the folder properties window.Click “Apply” and “OK” in the “Advanced Security Setting” window to close it.Now on “Auditing” tab of “Advanced security settings” window, you can see the newly added audit entry.Click “OK” to apply the auditing settings.Here, we have selected “Full Control” checkbox. If you want to audit all the actions, click “Full Control” checkbox. Select all the actions that you want to audit. Click “Show advanced permission” option in the permissions section to view all the permissions.In “Applies to” drop-down menu, select “This folder, subfolder, and files” option, if you want to audit all the subfolders and the files within this folder.You can select “Success” to monitor only successful events or you can select “Failure” to monitor only failure events.