Manual SACL configuration for EMC server auditing
To manually configure the required object-level auditing in target EMC server shares, follow the steps below:
- Right-click the target share > select Properties > Go to the Security tab.
- Click Advanced, and go to the Auditing tab.
- For the Everyone group, add the following entries.
To audit Principal Event type Accesses Applies to File and folder changes Everyone Success and failure - Create Files / Write Data
- Create Folders / Append Data
- Write Attributes
- Write Extended Attributes
- Delete Subfolders and Files
- Delete
This folder, subfolders, and files Folder permission and owner changes Everyone Success and failure - Take Ownership
- Change Permissions
This folder and subfolders File read Everyone Success and failure - List Folder / Read Data
Files only Folder read failure Everyone Failure - List Folder / Read Data
This folder and subfolders - Click OK to finish setting the required SACLs for the selected share.