WinSecWiki > Security Settings > Local Policies > Audit Policy > Object Access > File Share

File Share

This category logs one and only one event. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID Title
5140 A network share object was accessed.

Back to top

 

Upcoming Webinars
  • Rethinking Privileged Access for the Age of AI-Powered Attacks
  • Inside Entra ID Authentication: How Tokens, MFA, and Conditional Access Work and Where Attackers Break the Chain
  • Understanding Entra Privileged Identity Management, What PIM Covers and Where It Stops
Additional Resources
    Object Access
    •Detailed File Share
    •Removable Storage Devices
    •File System
    •Registry
    •Kernal Object
    •SAM
    •Certification Services
    •Application Generated
    •Handle Manipulation
    •File Share
    •Filtering Platform Packet Drop
    •Filtering Platform Connection
    •Other Object Access

     
     
    User name:
    Password:
      / Forgot?
      Register
    September 2026
    Patch Tuesday
    "Patch Tuesday - 3 Zero Days and 1,000+ Updates! " - sponsored by Supercharger
    .
    Tweet
    Follow @randyfsmith
    About | Newsletter | Contact Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2026 Monterey Technology Group, Inc. All rights reserved.
    Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.
    Terms of Use | Privacy |
    Cookies help us deliver the best experience on our website. By using our website, you agree to the use of cookies.