Monitoring share usage.

On a Windows 2000 server, how do I monitor shares, to see who is using them?
Using the files in the shares.

Is there a log? A tool I need to install?

Thanks!

"Purtech" wrote:
> On a Windows 2000 server, how do I monitor shares, to see who is using them?
> Using the files in the shares.
>
> Is there a log? A tool I need to install?
>
> Thanks!

If you need a snapshot about who is using a share in a precise moment you
can use the Computer Management snap-in (go to Administrative Tools or right
click My Computer and select Manage), look in Shared Folders\Sessions or
Shared Folders\Open Files. Through that snap-in you can see who is accessing
a share and which files he is using.

Regards,

Carlo

You can use auditing and results will be displayed in the Event Viewer -
Security log:

http://support.microsoft.com/kb/301640/en-us

Doug Sherman
MCSE, MCSA, MCP+I, MVP


"Purtech" <mikek(remove)@hlit.net> wrote in message
news:#(E-Mail Removed)...
> On a Windows 2000 server, how do I monitor shares, to see who is using
them?
> Using the files in the shares.
>
> Is there a log? A tool I need to install?
>
> Thanks!
>
>

Doug:

I have been trying this. I tried assigning the people to a group then
applying that group to the audit. I still get the System account and Admin
accounts appearing in the Security event viewer.

Is there a way to just audit a group of people and not have other accounts
show up in the viewer? Make sense?

Mike



"Doug Sherman [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> You can use auditing and results will be displayed in the Event Viewer -
> Security log:
>
> http://support.microsoft.com/kb/301640/en-us
>
> Doug Sherman
> MCSE, MCSA, MCP+I, MVP
>
>
> "Purtech" <mikek(remove)@hlit.net> wrote in message
> news:#(E-Mail Removed)...
>> On a Windows 2000 server, how do I monitor shares, to see who is using
> them?
>> Using the files in the shares.
>>
>> Is there a log? A tool I need to install?
>>
>> Thanks!
>>
>>
>
>

Probably, the easiest way is to filter the view. Right click Security log
and select View - filter. You can list users - not sure about groups.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Purtech" <mikek(remove)@hlit.net> wrote in message
news:uSI6C$(E-Mail Removed)...
> Doug:
>
> I have been trying this. I tried assigning the people to a group then
> applying that group to the audit. I still get the System account and Admin
> accounts appearing in the Security event viewer.
>
> Is there a way to just audit a group of people and not have other accounts
> show up in the viewer? Make sense?
>
> Mike
>
>
>
> "Doug Sherman [MVP]" <(E-Mail Removed)> wrote in
message
> news:(E-Mail Removed)...
> > You can use auditing and results will be displayed in the Event Viewer -
> > Security log:
> >
> > http://support.microsoft.com/kb/301640/en-us
> >
> > Doug Sherman
> > MCSE, MCSA, MCP+I, MVP
> >
> >
> > "Purtech" <mikek(remove)@hlit.net> wrote in message
> > news:#(E-Mail Removed)...
> >> On a Windows 2000 server, how do I monitor shares, to see who is using
> > them?
> >> Using the files in the shares.
> >>
> >> Is there a log? A tool I need to install?
> >>
> >> Thanks!
> >>
> >>
> >
> >
>
>