File Monitoring not working properly (Version 11.1 Build 11011]
Hello,
I currently have two servers set up for File Monitoring. In the ELA/FIM settings, I have the 'Username' option enabled.
The servers are configured (within the Local Sec Policy) to record all Success/Failure events. I also configured the drives themselves for auditing (right click drive -> properties -> Security -> Advanced -> Auditing Tab). Within this tab, I added 'Everyone' and set full control for auditing.
I am having the following issues:
1. The username is NOT included in the FIM section of ELA (shows as - ).
2. The actions are not all recorded. If I create a file randomly within the drive, there is a 50/50 chance that the event is not recorded
3. It seems like I always have to go Stop/Restart the service on the server in order to get it to refresh. I have this problem on some desktops as well.
Any ideas?
I currently have two servers set up for File Monitoring. In the ELA/FIM settings, I have the 'Username' option enabled.
The servers are configured (within the Local Sec Policy) to record all Success/Failure events. I also configured the drives themselves for auditing (right click drive -> properties -> Security -> Advanced -> Auditing Tab). Within this tab, I added 'Everyone' and set full control for auditing.
I am having the following issues:
1. The username is NOT included in the FIM section of ELA (shows as - ).
2. The actions are not all recorded. If I create a file randomly within the drive, there is a 50/50 chance that the event is not recorded
3. It seems like I always have to go Stop/Restart the service on the server in order to get it to refresh. I have this problem on some desktops as well.
Any ideas?