EXPERT RESPONSE
This is relatively simple to accomplish if you use the auditing functionality of Windows XP and Windows Vista. To get started, open Control Panel, and then:
- Click Performance and Maintenance
- Click Administrative Tools
- Double-click Local Security Policy
- Expand Local Policies in the left pane and select Audit Policy
- Double-click Audit Object Access in the right pane
- Check the Success box
- Click OK
Now that you have enabled auditing, right click on the files and folders on which you want access audited and select Properties. Navigate to the Security tab, and click Advanced. Navigate to the Auditing tab, click Add and then enter the user or group whose access you want to research, and click OK. Then, select Successful for each of the actions you're interested in, and then click OK.
|
