WinSecWiki > Security Settings > Advanced Audit Policies > Object Access > File Share

Audit File Share

This category logs one and only one event. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
5140	A network share object was accessed.

Back to top

 

Upcoming Webinars Inside Entra ID Authentication: How Tokens, MFA, and Conditional Access Work and Where Attackers Break the Chain Understanding Entra Privileged Identity Management, What PIM Covers and Where It Stops

Additional Resources