Shulou(Shulou.com)06/02 Report--

1. Environmental introduction

Server server2012: AD01.test.cn (domain administrator: administrator)

Client win7:testpc1.test.cn (domain account: sz1)

Client win7:test2-pc.test.cn (domain account: sh2)

The server creates a shared directory sharetest and grants Domain Users full access

2. Steps

Click "Server Manager"-- "tools"-"Group Policy Management" on a.server2012

b. Select [Default Domain Policy]-Select [Default Domain Policy]-double-click on the right side of "Audit object access" and check the "define these Policy Settings" and "success" options.

c. Right-click the shared folder (sharetest), select [Properties], and select [Security]-[Advanced] in the pop-up window.

d. Select "Audit" in the pop-up window, and then click "add"

e. Click "body" in the new window, enter everyone under "enter the object to be selected" in the new pop-up window, and then click OK.

f. Click [Show Advanced options], and check several options for creating, modifying, and deleting files or folders.

3. Run gpupdate / force on the server side to update the group policy

4. Verification

a. The client accesses the server shared folder and performs new and delete operations

b. The server clicks [Server Manager]-- [tools]-[component Services]

c. Click "event Viewer"-- "Windows Log"-"Security" and click "filter current Log" on the right.

d. In the pop-up filter log window, find the [include / exclude event ID...] entry: 4663, and make sure

e. View event

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.