I've got a 2008 server recently installed, and basically I want to have a log file to look through where I can see...
1. When a file is created/modified
2. WHO created/modified that file (user login name, ip address, etc)
3. The date and time that happened
So far the only thing I've found which sorta meets these requirements is an 'audit' setting in 'Local Security Policy' > 'Audit Policy' > 'Audit Object Access', but it spits out a whole load of crap that I don't need as well as missing a whole load of stuff that I DO need.
Any help would be great, gotta get this in place preferably ASAP
thanks
1. When a file is created/modified
2. WHO created/modified that file (user login name, ip address, etc)
3. The date and time that happened
So far the only thing I've found which sorta meets these requirements is an 'audit' setting in 'Local Security Policy' > 'Audit Policy' > 'Audit Object Access', but it spits out a whole load of crap that I don't need as well as missing a whole load of stuff that I DO need.
Any help would be great, gotta get this in place preferably ASAP
thanks