Server Role: Processadmin

Auditing a Shared Folder

Windows 7 and Server 2008 both have the feature to audit File Share. As stated by Microsoft, "This security policy setting determines whether the operating system generates audit events when a file share is accessed." We will be using this feature as other Systems Administrators do to detect if there has been intrusion. Remember that to stop the intrusion, effective firewalls are necessary.
Follow these steps to use Audit File Share:

1. Open Local Security Policy by clicking the Start button, typing secpol.msc into the search box, and then clicking secpol.‌ If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

2. In the left pane, expand the Advanced Audit Policy Configuration folder. Expand System Audit Policies - Local Group. Double-click on Object Access.

3. In the right pane double-click on Audit File Share.

4. In the Audit File Share Properties window select the Configure the following events: check box. Then select the Success check box and the Failure check box to audit both successful and unsuccessful attempts to access a shared folder. Then click OK.
   

Source: http://technet.microsoft.com/en-us/library/dd772690%28WS.10%29.aspx

System's Request

When submitting your system's request ensure that you've included all the variables including ROI and Initial Cost. Make sure to also explain how beneficial this new system will be.



For example, it is amazing how certain banks and credit unions have leapfrogged other competitors and left them in the dust. The technology and updates that have enabled members to access their accounts from a computer or phone has become more user friendly, increasing the utilization, and customer satisfaction.