Audit Detailed File Share
Applies To: Windows 7, Windows Server 2008 R2
This security policy setting allows you to audit attempts to access files and folders on a shared folder. The Detailed File Share setting logs an event every time a file or folder is accessed, whereas the File Share setting only records one event for any connection established between a client computer and file share. Detailed File Share audit events include detailed information about the permissions or other criteria used to grant or deny access.
Note
There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared files and folders on the system is audited.
Event volume: High on a file server or domain controller because of SYSVOL network access required by Group Policy
Default: Not configured
If this policy setting is configured, the following event is generated. The event appears on computers running Windows Server 2008 R2 or Windows 7.
| Event ID | Event message |
|---|---|
5145 |
A network share object was checked to see whether the client can be granted desired access. |