Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Windows 2008 domain controller. I also use this server for users' shared folders.

I'd like to know the users shared folder files movement on the server side. For example, when someone moves one folder/file from one shared folder to another, I need to see a log.

Is there a default tool inside Windows 2008 for this? Or is there any 3rd party tools?

share|improve this question
up vote 2 down vote accepted

A couple of popular options that haven't been mentioned by others are OSSEC and Verisys.

OSSEC is an Open Source system that can monitor filesystems for changes. It's certainly not the slickest in terms of ease of use, but it is free, and works on Windows and Linux.

Ionx Verisys is a commercial file integrity monitoring system. This is much easier to use than OSSEC, or Tripwire (which someone else already mentioned), and isn't that expensive compared to other commercial alternatives (e.g Tripwire). Though it's more expensive than OSSEC, of course :)

P.S. You might want to work on that 0% accept rate a bit!

share|improve this answer

The built-in auditing will do what you want, after you enable and configure it. But it's hellish to read the logs and extract useful info.

share|improve this answer

There are a few products that can help with this:

Power Admin's PA File Sight

ScriptLogic's File Audit

ISDecisions's FileAuditor

share|improve this answer

Yes try tripwire more compliance network security tool, but does exactly what you want

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.