Q. EventLog 'Security' - EventID: 567 on Shared Folder.

[Guest Yoshihiro Kawabata]

Hello,

 

I want to audit client access to server's shared folder,

who read/write/delete/copy/move what file.

 

So, We setup Local security policy and audit option to target folder.

and can capture security events , EventID: 540, 562.

 

but I cannot capture EventID: 567, if access a file from Windows XP client

to Windows Server 2003's Shared Folder.

 

How can I capture 567 ?

 

Regards,