Monitoring share usage.

On a Windows 2000 server, how do I monitor shares, to see who is using them?
Using the files in the shares.

Is there a log? A tool I need to install?

Thanks!

If you need a snapshot about who is using a share in a precise moment you
can use the Computer Management snap-in (go to Administrative Tools or right
click My Computer and select Manage), look in Shared Folders\Sessions or
Shared Folders\Open Files. Through that snap-in you can see who is accessing
a share and which files he is using.

Regards,

Carlo

You can use auditing and results will be displayed in the Event Viewer -
Security log:

http://support.microsoft.com/kb/301640/en-us

Doug Sherman
MCSE, MCSA, MCP+I, MVP

Doug:

I have been trying this. I tried assigning the people to a group then
applying that group to the audit. I still get the System account and Admin
accounts appearing in the Security event viewer.

Is there a way to just audit a group of people and not have other accounts
show up in the viewer? Make sense?

Mike

Probably, the easiest way is to filter the view. Right click Security log
and select View - filter. You can list users - not sure about groups.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode test 33Switch to Hybrid Mode Switch to Threaded Mode

1 13th July 07:14 purtech External User Posts: 1	Monitoring share usage. On a Windows 2000 server, how do I monitor shares, to see who is using them? Using the files in the shares. Is there a log? A tool I need to install? Thanks!

2 13th July 07:14 carlo cacciafesta External User Posts: 1	Monitoring share usage. If you need a snapshot about who is using a share in a precise moment you can use the Computer Management snap-in (go to Administrative Tools or right click My Computer and select Manage), look in Shared Folders\Sessions or Shared Folders\Open Files. Through that snap-in you can see who is accessing a share and which files he is using. Regards, Carlo

3 13th July 07:14 doug sherman mvp External User Posts: 1	Monitoring share usage. You can use auditing and results will be displayed in the Event Viewer - Security log: http://support.microsoft.com/kb/301640/en-us Doug Sherman MCSE, MCSA, MCP+I, MVP

4 13th July 07:14 purtech External User Posts: 1	Monitoring share usage. Doug: I have been trying this. I tried assigning the people to a group then applying that group to the audit. I still get the System account and Admin accounts appearing in the Security event viewer. Is there a way to just audit a group of people and not have other accounts show up in the viewer? Make sense? Mike

5 13th July 07:14 doug sherman mvp External User Posts: 1	Monitoring share usage. Probably, the easiest way is to filter the view. Right click Security log and select View - filter. You can list users - not sure about groups. Doug Sherman MCSE, MCSA, MCP+I, MVP