From the course: Securing Windows Server 2019
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Audit object access - Windows Server Tutorial
From the course: Securing Windows Server 2019
Audit object access
- [Instructor] Typically, if we want to go ahead and enable auditing, all we have to do is come into Group Policy and select the particular event and enable the success and/or failure of that event. But there is one exception to the rule, and that is when trying to audit object access, okay? Everything else, that's all you have to do. But when it comes to auditing object access, we have to do a second step. And the reason why, let's think about this for a minute. If we look at the screen as it is now, where auditing object access has been set up, it's been turned on for successes and failures. Now this has to do with anybody who's accessing any of our resources, files, folders, things like that. Any object in our network. Could you imagine how long the audit logs will be if we just turned it on, and it just started auditing every time somebody accessed anything on the entire network? Whether they succeeded or failed, there'd be an entry. That's just too much. So let me show you what…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.