3

Is there a way to log all Windows permission errors?

I would like something like:

-> Application "XYZ" tried to read/write/whatever file "Foo" as User "Bar": permission denied

  • 1
    For Windows 7 look at "Administrative Tools | Local Security Policy | Security Settings | Local Policies | Audit Policy" (or just run secpol.msc). For files/folders also look at "file/folder | Properties | Security | Advanced | Auditing" – LazyOne Sep 12 '11 at 0:32
  • @LazyOne: You need to post that as an answer for future visitors. – surfasb Sep 12 '11 at 0:33
  • @LazyOne -> For files/folders, Auditing is empty :( – andrecarlucci Sep 12 '11 at 1:26
  • @andrecarlucci Yes, it's empty -- this means no auditing is setup (that is the default for almost all files except maybe very few system files -- auditing can produce noticeable overhead on very busy systems). Click "Edit" and then "Add" to create auditing entry/rule. – LazyOne Sep 12 '11 at 1:30
  • Thanks a lot @LazyOne. Could you please post your comment as an answer? Cheers. – andrecarlucci Sep 12 '11 at 1:39
2

In Windows 7, for general auditing look at "Administrative Tools | Local Security Policy | Security Settings | Local Policies | Audit Policy" .. or just run secpol.msc.

For auditing for files/folders look at "file/folder | Properties | Security | Advanced | Auditing". By default it will be empty for almost all files except maybe very few system files (auditing can produce noticeable overhead on busy systems). Empty means that no auditing is setup. Click "Edit" and then "Add" to create auditing entry/rule.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.