Who gave access to the folder? (MS W2k8 R2+SMB)

Question

System administration

Good day!

There is a domain. There is a shared folder on a Windows 2008 R2 server.
There are 4 administrators who distribute rights to it to low- income users.

Suddenly (suddenly) the rights to the folder are given to the user, about which 2 admins have not heard that.

Question. Is it possible to track what rights were granted, to whom, by whom, for what and for what (in the sense of date-time)? :)

Answer 1

I advise you to read about Audit of changes in access rights . This will be visible in the event viewer if the appropriate audit policy is configured.

Answer 2

Have you tried looking at the event viewer logs ? it should be there.