I need to enable directory auditing on windows server 2003 to a specific directory.
So first of all i set in the Defaul Domain Controller Policy / Security / Local / Audit / Object access audit (both success and failur)
So, auditing my directory work well, but unfortunatelly the event log is full with:
Source: Security, EventID 562; Microsoft Exchange, C:\Program Files\Exchsrv\bin\store.exe
So, i check this file properties (security-->advanced ---> audit) but nothing audit specific properties set for this file.
How can i check which file have this settings? Any list where i can check? How to turn on Object Aceess to this file?