Thanks to who replied. It is just to audit one applications exe file, to see if the application is still being used. Thanks Stephen "Mark CALLEJA" <Mark.CALLEJA@dhw To: thin@xxxxxxxxxxxxx .wa.gov.au> cc: Sent by: Subject: [THIN] Re: Auditing file usage thin-bounce@freel ists.org 16/10/2003 12:20 Please respond to thin Steven Don't forget if you only need to find out who is using what file FILEMON.EXE from sysinternals.com. This is a real time only option if you wish to log access for "other" reasons (ie security audit requirements) then the suggestion from Neil is the easiest option. Do not forget to increase your security log file size they will fill up real quick especially if you have to log large portions of you CTX machines. HTH Mk Mark Calleja Coordinator Network Systems Network Systems Dept Housing and Works (08) 9222 4941 mark.calleja@xxxxxxxxxxxxx >>> Neil.Braebaum@xxxxxxxxxxxxxxxxx 16/10/2003 18:42:30 >>> Are you talking about files on a file server - or files on a particular Citrix server? If the local Citrix server, unless a very small implementation, I'd question access to local file by users, anyways (unless we are talking about programs). But assuming NTFS and Windows 2000, then answer is yes - although you'll probably have to turn on auditing (in general) via policy. Then you'd have to set SACLs (the effective mirror of DACLs for auditing) on the appropriate objects (in this case, file or directories). I have (in the past) struggled to effectively script modifications to SACLs - but at the time, I mainly gave up due to there not being a glut of info on the subject (or at least that which I found at the time). But assuming you have enabled auditing - you set SACLs in much the same way (through the GUI) that you would set permissions on a file / folder. Neil > -----Original Message----- > From: Stephen Taylor [mailto:Stephen.Taylor@xxxxxxx] > Sent: 16 October 2003 11:15 > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Auditing file usage > > > Hi There > > Is there a way to audit file useage and by which users > without installing any 3rd party software? I using W2K > advanced server with Sp3, and Citrix MF 1.8 Sp3 installed. > > Thanks in advance. > > Stephen *********************************************** This e-mail and its attachments are confidential and are intended for the above named recipient only. If this has come to you in error, please notify the sender immediately and delete this e-mail from your system. You must take no action based on this, nor must you copy or disclose it or any part of its contents to any person or organisation. Statements and opinions contained in this email may not necessarily represent those of Littlewoods. Please note that e-mail communications may be monitored. The registered office of Littlewoods Limited and its subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB. Registered number of Littlewoods Limited is 262152. ************************************************ ******************************************************** This Week's Sponsor - Emergent Online Essential Thin Client Utilities. Meet Jim Kenzig of thethin.net at the Emergent Online Booth #24 at Citrix iForum on October 13th. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Week's Sponsor - Emergent Online Essential Thin Client Utilities. Meet Jim Kenzig of thethin.net at the Emergent Online Booth #24 at Citrix iForum on October 13th. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ************************************************************************************* This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is prohibited. If you are not the intended or authorised recipient please contact the sender by reply email and delete all copies of this message ******************************************************** This Week's Sponsor - Emergent Online Essential Thin Client Utilities. Meet Jim Kenzig of thethin.net at the Emergent Online Booth #24 at Citrix iForum on October 13th. http://www.go-eol.com ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm New! Online Thin Computing Magazine Site http://www.OnDemandAccess.com For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm