[THIN] Re: Auditing file usage
- From: "Mark CALLEJA" <Mark.CALLEJA@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 16 Oct 2003 19:20:44 +0800
Steven
Don't forget if you only need to find out who is using what file FILEMON.EXE
from sysinternals.com. This is a real time only option if you wish to log
access for "other" reasons (ie security audit requirements) then the suggestion
from Neil is the easiest option. Do not forget to increase your security log
file size they will fill up real quick especially if you have to log large
portions of you CTX machines.
HTH
Mk
Mark Calleja
Coordinator Network Systems
Network Systems
Dept Housing and Works
(08) 9222 4941
mark.calleja@xxxxxxxxxxxxx
>>> Neil.Braebaum@xxxxxxxxxxxxxxxxx 16/10/2003 18:42:30 >>>
Are you talking about files on a file server - or files on a particular
Citrix server?
If the local Citrix server, unless a very small implementation, I'd
question access to local file by users, anyways (unless we are talking
about programs).
But assuming NTFS and Windows 2000, then answer is yes - although you'll
probably have to turn on auditing (in general) via policy. Then you'd
have to set SACLs (the effective mirror of DACLs for auditing) on the
appropriate objects (in this case, file or directories).
I have (in the past) struggled to effectively script modifications to
SACLs - but at the time, I mainly gave up due to there not being a glut
of info on the subject (or at least that which I found at the time).
But assuming you have enabled auditing - you set SACLs in much the same
way (through the GUI) that you would set permissions on a file / folder.
Neil
> -----Original Message-----
> From: Stephen Taylor [mailto:Stephen.Taylor@xxxxxxx]
> Sent: 16 October 2003 11:15
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Auditing file usage
>
>
> Hi There
>
> Is there a way to audit file useage and by which users
> without installing any 3rd party software? I using W2K
> advanced server with Sp3, and Citrix MF 1.8 Sp3 installed.
>
> Thanks in advance.
>
> Stephen
***********************************************
This e-mail and its attachments are confidential
and are intended for the above named recipient
only. If this has come to you in error, please
notify the sender immediately and delete this
e-mail from your system.
You must take no action based on this, nor must
you copy or disclose it or any part of its contents
to any person or organisation.
Statements and opinions contained in this email may
not necessarily represent those of Littlewoods.
Please note that e-mail communications may be monitored.
The registered office of Littlewoods Limited and its
subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB.
Registered number of Littlewoods Limited is 262152.
************************************************
********************************************************
This Week's Sponsor - Emergent Online
Essential Thin Client Utilities.
Meet Jim Kenzig of thethin.net at the Emergent Online
Booth #24 at Citrix iForum on October 13th.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Emergent Online
Essential Thin Client Utilities.
Meet Jim Kenzig of thethin.net at the Emergent Online
Booth #24 at Citrix iForum on October 13th.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
New! Online Thin Computing Magazine Site
http://www.OnDemandAccess.com
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
