Mark works as a Network Administrator for ABC.com. The company has a Windows domainbased network. The domain contains four Windows servers and 500 Windows Professional client computers.
The company's Marketing department uses a member server named Fserv that stores confidential files. The files are stored in a folder named DATA. The Marketing department users are members of a group named Market. The NTFS permissions on the DATA folder and files in that folder allow access only to the Administrators group and the Market group.
The NTFS permissions are configured to allow full control on the DATA folder. The share permissions are the default permissions. Mark wants to track users who attempt to gain access to files in the DATA folder on Fserv. For this purpose, he configures auditing on the DATA folder and files in that folder. He configures auditing on the Failed attempts for each access type on the Everyone group.
When he checks the auditing configuration by attempting to access the files with a domain user account that does not have access permissions to the files, he receives an "Access Denied" message. However, this Failed attempt does not appear in the security log on Fserv.
What will Mark do to resolve the issue?
- Grant the Generate security audits privilege to the Fserv computer account.
- Enable the Audit object access policy for Failed and Successful attempts in a new Group Policy object (GPO) that applies only to Fserv.
- Configure the auditing entries to apply to the Administrators group and the Market group, instead of the Everyone group.
- Enable the Audit object access policy for Failed attempts in a new Group Policy object (GPO) that applies only to Fserv.