Audit File & Folder Access in Windows 11 & 10

Find out who accessed your files & folders in Windows by enabling auditing on them
Amazon links are affiliate links. I gain a small percentage at no cost to you if you make a purchase. This will help my channel. Thank you.

Chapters: How to enable auditing on folders and files in windows 10
00:00 Intro & Why is auditing important
00:16 Requirements and steps
01:08 Enable Object access auditing on File System
03:09 Configure Auditing on Files & Folders
05:59 View audit log

Follow me on:
My websites:

Disclaimer: Use the instructions in this video at your own risk. We are not responsible for any data loss or other damages that may occur

how to enable auditing in windows

[mokox]

How to make it (the log) centralize if there are many windows 10 ?

[itsarg]

Absolutely amazing work, thankyou soo much for puting this video out.

[rockbubbles]

Very useful, thank you! What is the significance of selecting "Full Control" when setting the permissions? Does that restrict the type of access being audited?

[MA-fgfb]

very well explained, Sir I have two important questions after watching. First, is it advisable to configure auditing Drives (having multiples folders some shared some or not) OR should auditing be done on individual folders, the second question is under a local policy we have AT two places where we can enable auditing the first place is under Branch local security policy\local policies\audit object Access. The second branch is the (Advanced Audit policy Configuration\System\Audit Policies-Local Group Policy Object\Object Access) - what is the difference, and what branch makes what difference. I hope you can reply on it