Windows Server® 2012 Unleashed

Auditing File Access

A good practice for file-level security is to set up auditing on a particular server, directory, or file. Auditing on ReFS volumes enables administrators to be notified of who is accessing, or attempting to access, a particular directory. For example, it might be wise to audit access to a critical network share, such as a finance folder, to determine whether anyone is attempting to access restricted information.

Note

Audit entries are another example of security settings that can be automatically set via security templates in Windows Server 2012. It is wise to consider the use of security templates to more effectively control audit settings.

The following steps illustrate how to set up simple auditing on a folder in Windows ...