What is file audit?

Then, how can I tell who last accessed a file?

Select the first item in the log, and thencheckthe Object Name field on the General tab to seewhichfile was accessed. Select the following item inthelog until you find the appropriate event. Review the Subjectfieldon the General tab to see which network useraccessedthe file last.

Subsequently, question is, how do I audit a file in Windows Server 2012? 2. Enable Auditing of Specific Folder

1. Select the folder that you want to audit.
2. Right-click and click “Properties” to accessitsproperties.
3. Go to “Security” tab, andclick“Advanced”.
4. In “Advanced Security Settings…”
5. Click “Add”. “
6. Click “Select a principal” link.

Beside this, how do I enable file sharing in auditing?

Enable object auditing in Windows:

1. Navigate to Administrative Tools > LocalSecurityPolicy.
2. In the left pane, expand Local Policies, and then clickAuditPolicy.
3. Select Audit object access in the right pane, and thenclickAction > Properties.
4. Select Success and Failure.
5. Click OK.

What is Audit object access?

Audit Object Access. The Auditobjectaccess policy handles auditing access toallobjects outside AD. The first use you might think of forthepolicy is file and folder auditing, but you can use ittoaudit access to any type of Windows objectincludingregistry keys, printers, and services.