You are on the phone with Arin who is having a problem configuring
auditing on his computer. He wants to configure auditing because he believes someone has access to the
secure files on his computer. He configured audit settings on his secure documents, but no
audit log is generated. Arin is the administrator of his computer and no other users use his computer. What should you tell Arin?
The
security policy applied to the computer does not allow auditing
file access. It is likely the auditing of files is disabled. The security policy could be a local, site, domain, or OU policy. Arin should run the RSOP (Resultant Set of Policy) mode to determine the policy settings applied to the computer. The "Audit Object Access" should be enabled.