Auditing Resource Use

Auditing files and directories on a server provides a history of their use. You can identify who took various types of actions with the files and directories and hold those users accountable for their actions. You also can audit printers.

The audit category File and Object Access creates a security event log entry each time a user in the audit list performs one of following actions:

Accesses a directory or file that is set for auditing.

Uses a printer that is connected to a computer whose directories and files are being audited.

You can audit successful or failed actions, or both.

For information about auditing printers, see Chapter 6, "Setting Up Print Servers."

For information about auditing files and directories, see Chapter 7, "Monitoring Events."

For information about how to audit files and directories, see "To audit a file or directory" and "To remove file or directory auditing for a group or user" in Windows NT Help.