3
votes
1answer
224 views

How Do I Change the Active DIrectory Auditing Events Maximum?

We recently starting testing the ADAudit tool and turned on some new auditing features in AD. I have an LDAP Modify action in a custom program I've written that updates very large memberships for ...
0
votes
2answers
344 views

How can I audit ONLY logon / logoff's in Windows Domain

I am aware of multiple "auditing" questions around SF, however I feel as though this question is slightly different. The Goal: Audit only user logons and logoffs in my domain. The domain functional ...
0
votes
1answer
160 views

Creating a custom view for windows log based on a “Contains {text}” rule

I have a server running Windows Server 2008. I'm using Windows Server Auditing to check when and by which user a folder is modified to determine who is modifying it as the modifications are causing ...
1
vote
1answer
236 views

Windows Search Service causing too many accessed files

I am trying to more closely audit my users access of files located on a file share. The files share is served by a server running windows server 2008 R2 and running the Windows Search Service. I am ...