Monitor Documents using the Group Policy in Windows 11/10

Download PC Repair Tool to quickly notice & fix Windows errors automatically

Group Policy allows you to audit or monitor the changes on your Windows estimator. Using the Grouping Policy you tin monitor who has logged on and when, who has opened a document, who has created a new user business relationship, or changed a security policy.

Monitor your Documents using the Grouping Policy

To exercise so, blazon on secpol.msc in outset search and striking Enter to open Local Security Policy.

Under Security settings in the left pane, expand Local Policies and then select Inspect Policy.

As you lot tin can see, you tin audit:

Account logon events: Account logon events are generated whenever a computer validates the credentials of an account for which it is authoritative.
Account management: Lets you lot run across if someone has changed an account name, enabled or disabled an account, created or deleted an account, changed a password, or changed a user grouping
Directory service access: Monitor this to see when someone accesses an Active Directory object that has its own system access command list (SACL).
Logon events: Log off events are generated whenever a logged-on user business relationship's logon session is terminated.
Object admission: Lets you see when someone has used a file, folder, printer, registry keys, or some other object.
Policy alter: Audits changes to local security policies.
Privilege use: Monitor this to run across when someone performs a job on the calculator that they have permission to perform
Process tracking: Rail events such equally program activation or a procedure exiting.
Organisation events: Lets you monitor and see when someone has shut downwardly or restarted the computer, or when a procedure or program tries to practice something that it doesn't take permission to do.

Double-click the 1 y'all wish to monitor and select the Success choice. Click Apply. You can go more information on each if you click on the Explicate tab.

To enable monitoring of your documents, right-click the file and click open Backdrop.

Select Security tab > Advanced > Auditing tab.

Click Continue to open the Advanced Security Settings box and click Add.

At present, in the Enter the object name to select box, type the name of the user or grouping whose deportment you desire to keep runway of, and so click OK in each of the iv open up dialog boxes.

Select the checkbox for any action you want to inspect, and then click OK. To larn more than about what you tin can inspect and the auditable deportment for files, visit Microsoft.

To view the Audit Logs, blazon Event Viewer in outset search and striking Enter.

In the left pane, double-click Windows Logs, and then click Security. Next double-click an event to see view the log details.

I hope you find this postal service useful.

Anand Khanse is the Admin of TheWindowsClub.com, a 10-year Microsoft MVP (2006-xvi) & a Windows Insider MVP. Delight read the entire post & the comments commencement, create a Organisation Restore Bespeak earlier making whatever changes to your system & exist conscientious about whatever tertiary-party offers while installing freeware.