Setting a system ACL on a file
Description
Use this procedure to sets a system ACL (SACL) on a file. You must complete this procedure to monitor access activity on a file. You complete this procedure when you have decided to monitor access to a file by specified users or groups. The procedure is the standard Windows NT procedure for setting a SACL on a file. After you complete this procedure, if access logging is enabled, the filer logs accesses to the file by the users or groups you specified.
Prerequisites
You must have the following items to complete the procedure:
- The name of the file you want to monitor
- The name of the users or groups whose access to the file you want to monitor
Steps
To set a SACL on a file, complete these steps.
|
Step
|
Action
|
|---|
|
1
|
Right-click the file you want to monitor.
Result
The Properties tab for that file appears.
|
|
2
|
Click the Security tab.
Result
The Security properties window appears.
|
|
3
|
Click the Auditing button.
Result
A blank File Auditing window appears for the file you specified.
|
|
4
|
Click the Add button.
Result
The Add Users and Groups window appears.
|
|
5
|
Click the arrow next to the List Names From text box to choose a domain that contains names that you want to add.
Result:
A list of names in the selected domain appears in the Names list box.
|
|
6
|
To add a name, type one or more user names in the Add Names list box or select one or more names and click Add.
|
|
7
|
Specify one or more names in one of these ways:
- Click one or more names in the Names list box.
- Type valid user or group names in the Add Names list box.
|
|
8
|
Click Add in the window where you selected the names.
Result
The names are added to the Add Names field of the Add Users and Groups window.
|
|
9
|
If you want, display the full name of a user associated with an account name by clicking Show Full Name.
|
|
10
|
Click OK.
Result
The names appear in the Name field of the File Auditing window and the Events to Audit check boxes are enabled, as shown below. In the following figure, checks indicate the boxes that you can select.
Note: Execute, Delete, Change Permissions, and Take Ownership events are not currently supported.
|
Copyright © 1999, Network Appliance, Inc. All rights
reserved.
Part No. 210-02334
File: cifs23.htm
Last updated: 04/26/99 08:11:33