Hi Everybody!
I am trying audit access to a specific folder in a shared folder.
On the machine filesystem auditing has been enabled in like below:
The folder itself has the following permissions ('List folder / read data' is the important one).
This generates event 4663 if the folder is opened from the local machine, this is great.
The problem is, if the folder is opened from a remote machine, no event is logged.
Does anyone know why this could be occurring? Is there some setting that also needs to be enabled?
Thanks