audit tab

KNOWLEDGE BASE Knowledge Base Article: 000044986 After enabling auditing on windows shares, the Audit tabs were missing. (000044986) Version:1 Audience: Level 30 = Customers Original Create Date: Mon Sep 24 23:03:25 GMT 2007 Article Type: Break Fix Channels: Customer , Internal App First Published: Fri May 31 00:19:38 GMT 2013 Validation Status: Final Approved Originally Created By: KBAdmin Last Modified: Fri May 31 00:19:38 GMT 2013 Last Published: Fri May 31 00:19:38 GMT 2013 Summary: Issue: After enabling auditing on windows shares. The audit tabs were missing. The Data Mover was rebooted and the audit tab went back online, however it disappears again after some time. Unable to get the Auditing tab under Windows Security advanced tab. When a new CIFS share was created, the Audit tab works fine, however it disappears after some time. server_security server_2 -i -p gpo The related GPO setting indicates the following Generate security audits: *S-1-5-19,*S-1-5-20 Manage auditing and security log: *S-1-5-32-544 Environment: Product: Celerra EMC SW: NAS Code 5.5 Protocol: Common Internet File System (CIFS) Protocol: Server Message Block (SMB) Cause: User did not have the right to view the Audit tab. Resolution: Add the relevant groups to the above listed GPOs to enable the Audit tabs. Notes: Generate security audits - determines which accounts can be used by a process to add entries to the security log. The security log is used to trace unauthorized system access. This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers. By default, only the Local System account has the privilege to be used by processes to generate security audits. Manage auditing and security log - determines which users can specify object access auditing options for individual resources such as files, Active Directory objects, and registry keys. A user with this right can use the security tab in the security permission set editor's Properties dialog box to specify auditing options for the selected object. This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers. By default, only administrators have the privilege to manage auditing and the security log. Product: Celerra CFS, Celerra Network Server, Celerra Shared: Yes RCA Status: Not Started External Source: Primus Primus/Webtop solution ID: emc170779 Originally Created By: KBAdmin

Upload
sunil-garnayak
Category

Documents
view
4
download
0

Embed Size (px):

description

celerra audit kb

Transcript of audit tab

KNOWLEDGE BASE

Knowledge Base Article: 000044986 After enabling auditing on windows shares, the Audit tabs were missing. (000044986)

Version:1

Audience: Level 30 = CustomersOriginal Create Date: Mon Sep 24 23:03:25 GMT

2007Article Type: Break Fix

Channels: Customer , Internal App First Published: Fri May 31 00:19:38 GMT 2013 Validation Status: Final Approved

Originally Created By: KBAdmin Last Modified: Fri May 31 00:19:38 GMT 2013 Last Published: Fri May 31 00:19:38 GMT 2013

Summary:

Issue: After enabling auditing on windows shares. The audit tabs were missing. The Data Mover was rebooted and the audit tab went back online, however it disappears again after some time.

Unable to get the Auditing tab under Windows Security advanced tab.

When a new CIFS share was created, the Audit tab works fine, however it disappears after some time.

server_security server_2 -i -p gpoThe related GPO setting indicates the followingGenerate security audits: *S-1-5-19,*S-1-5-20Manage auditing and security log: *S-1-5-32-544

Environment: Product: Celerra EMC SW: NAS Code 5.5

Protocol: Common Internet File System (CIFS) Protocol: Server Message Block (SMB)

Cause: User did not have the right to view the Audit tab.

Resolution: Add the relevant groups to the above listed GPOs to enable the Audit tabs.

Notes: Generate security audits - determines which accounts can be used by a process to add entries to the security log. Thesecurity log is used to trace unauthorized system access.This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy ofworkstations and servers. By default, only the Local System account has the privilege to be used by processes togenerate security audits.

Manage auditing and security log - determines which users can specify object access auditing options for individualresources such as files, Active Directory objects, and registry keys. A user with this right can use the security tab in thesecurity permission set editor's Properties dialog box to specify auditing options for the selected object. This user right isdefined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations andservers. By default, only administrators have the privilege to manage auditing and the security log.

Product: Celerra CFS, Celerra Network Server, Celerra

Shared: Yes

RCA Status: Not Started

External Source: Primus

Primus/Webtop solution ID: emc170779

Originally Created By: KBAdmin