Audit Permission folder changes
Hi!
I need to audit the folder permissions changes, in event 4670. When i do a "Search" with EVENTID = 4670, in "Message field" the alert says "Type of object: Token". It can be File or Folder, but when I recieve a notification, the token is always "File".
I want to create an alert to tell the difference between file or folder to the audit on 4670 events.
Anybody can helps me?
I need to audit the folder permissions changes, in event 4670. When i do a "Search" with EVENTID = 4670, in "Message field" the alert says "Type of object: Token". It can be File or Folder, but when I recieve a notification, the token is always "File".
I want to create an alert to tell the difference between file or folder to the audit on 4670 events.
Anybody can helps me?
Topic Participants
egiltinas
Karthik Annavi
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?