Enable File and Folder Access Auditing in Windows Server 2019

[@AuroSya]

This was a wonderful step-by-step guide! Thank you.

[@jeremymorrow9477]

9:14 "Now it's time to taste the lizard"

[@MSFTWebCast]

Jeremy, I think its high time to put subtitle.

[@jeremymorrow9477]

@@MSFTWebCast Hehe, maybe. Nothing against you or the videos. The videos are great. It just gives me a chuckle every time I hear it.

[@albertvivesleal9458]

You solved my problem because I missed one step that other related videos doesn't show. Thank you

[@MSFTWebCast]

You are welcome!

[@pavanpani267]

Thanks for this video.... If I delete any data through share folder.. the data will be available in recycle bin or it will be permanently get deleted...? Plz reply...

[@Ms.Robot.]

This is very helpful❤️

[@hadikan9523]

Perfect explanation and it works.

[@teknet7283]

Thanks for the video, is it necessary to enable auditing for the file folder part (properties>security>auditing and allow success/failure) or is it sufficent for the local group policy to handle that?

[@virendra107]

Thanks l lot

[@MSFTWebCast]

Welcome!!

[@rodricontv8384]

If you don't link the policy to the DC, you will not be able to audit? Can you link the Polity just to specific OU?

[@tn19801980]

thanks

[@KrrishShukla]

Will it audit if file is changed?

[@loareva6512]

Hi Sir, I'm new to WIN Server 2019. I've got several questions and thought if you can create a video and share it, and/or explain how the configuration should be done for these policies. 1. How do you make at least one IT Admin Staff who belongs to a IT Staff Group to have remote management access to the server? 2. How do you configure that only authorised staff should have access to the services on the server? 3. Access to all services on the server must be prevented if the access comes from outside the network, i.e. IP addresses outside the LAN network 4. All communication into and out from the server must be encrypted, i.e. file sharing and web services Thanks

[@anandbpatil1]

What happens when folder is deleted and re-created, are Audit policy retained back?..If no, how could we achieve this?

[@boytongo]

Can I make auditing of files and folders without making the computer a member of domain? The users have the security for the folder. If not, what should I do?

[@rahiskhanyoyo]

Help me, user cannot deleted any folder can be possible.

[@hmj8469]

great video, I am having some trouble understanding the purpose of the GPO. Seems the auditing was done via going into the security properties of the folder you wanted to audit. Why did you need to create a GPO and link to your DC?

[@louisdevito2471]

The GPO Enables Auditing, but it doesn't turn it on. The auditing tab is what actually Turns On Auditing, is my understanding.

[@arshmierzadakhan3138]

Group Policy Object (GPO) is a collection of Group Policy settings that defines what a system will look like and how it will behave for a defined group of users. As the name suggests, its used for group of users to simplify management of multiple users at a same time. You can avoid GPO and create a policy for each user as well.

[@MrRobravens]

The auditing tab will not appear until the GPO is defined

[@ibrenecario7357]

And where do I find it when eventlog is overwritten?

[@vivekprajapati7911]

good..

[@ismailkayakiran3875]

folsec.com you can use for audit

[@manishpd1889]

how to retrieve a file from client pc to domain pc

[@MSFTWebCast]

You can copy the files using shared folder over the network.

[@jeyosman1]

How can I forcefully logoff user or shut down his computer?

[@ahmedsaad-lk2og]

OK

[@ismailkayakiran3875]

folsec.com file and folder audit tools. Folder Permission manager

[@TeSt-py2up]

why using software u need paying for if you have free onboard auditing system?

[@ismailkayakiran3875]

@@TeSt-py2up Windows audit does not provide you with visibility and meaningful analysis. But folsec offers :)