Is there a way to log all Windows permission errors?

Question

Is there a way to log all Windows permission errors?

I would like something like:

-> Application "XYZ" tried to read/write/whatever file "Foo" as User "Bar": permission denied

Answer 1

In Windows 7, for general auditing look at "Administrative Tools | Local Security Policy | Security Settings | Local Policies | Audit Policy" .. or just run secpol.msc.

For auditing for files/folders look at "file/folder | Properties | Security | Advanced | Auditing". By default it will be empty for almost all files except maybe very few system files (auditing can produce noticeable overhead on busy systems). Empty means that no auditing is setup. Click "Edit" and then "Add" to create auditing entry/rule.