This information provides a detailed inventory of what users are doing with which files and folders, and when such activities occur.įor both current versions of Windows - Windows 10 and Windows 11 - administrators can turn to Group Policy Management as an audit policy tool.īecause of the volume of file system activity inherent in an enterprise Windows setting, it seldom makes sense to monitor all activities all the time.
Organizations should track the general use of files and folders, especially with the timestamping information that's invariably included. This is also somewhat of a security requirement and monitoring in this fashion is required in some industries. Organizations should keep track of changes that occur to key files and folders, looking for anything out of the ordinary or suspicious. When the use of high-level privileges and accounts is required, many organizations monitor such files and related changes carefully.
See Microsoft's security identifiers document for more details. IT can use programs such as TrustedInstaller to handle these sensitive files carefully. The leading reasons for monitoring include the following:Ĭertain parts of the file system - especially those related to account data, OS permissions and controls - should never be "touched" by IT except for on rare occasions. There are many good reasons to monitor the Windows file system on modern PCs. IT administrators who seek a positive UX for Windows desktop users should monitor some if not all of the Windows files and folders.
0 kommentar(er)
