Audit (log) Access to Shared Folders

November 16, 2010

(Originally published on the Seven Forums)

Windows 7 Professional, Ultimate and Enterprise editions have a powerful built-in tool to control the working environment of user accounts and computer accounts. The tool is Group Policy Editor, gpedit. Later on I’m going to tell you more about gpedit, this time we look into how to start auditing (logging) access to your shared folders using Group Policy Editor.

Auditing access to your shared folders makes it possible to keep track of what’s happening; who visits the shared folders, when, doing what. It might not be needed on a “Me and my laptop” networks, although in my opinion it adds a bit to general security of your system and network. When needed, the information is there. Auditing logs are very small files, taking almost no space on hard disk. Auditing does not “eat” the resources of your computer, does not make it slower.

Read the rest of this entry »