The Auditing tab in the Advanced Security Settings window allows you to
log access activity relating to the selected object. Before auditing will work,
you??™ll need to set up an auditing policy by opening the Group Policy
window (gpedit.msc). Then, navigate to Computer Configuration\Windows
Settings\Security Settings\Local Policies\Audit Policy, and double-click
any entry in the right pane (such as Audit logon events or Audit privilege
use) to instruct Windows to start keeping track of those events. Later on,
open the Event Viewer (eventvwr.msc) to view the corresponding logs.
Note that settings in the Auditing tab also obey the inheritance scheme
just discussed.
The Owner tab is used to assume ownership of one or more objects, and can
be the source of a lot of frustration when wrestling with permissions. One of
the means by which Vista maintains its lock on important operating system
files and Registry keys is through ownership; by default, all these systemlevel
objects are owned by a user named ???Creator Owner.??? (See the upcoming
sidebar, ???What??™s the Creator Owner Account?,??? for details.) To make
any changes to these objects, you must first assume ownership by selecting
Figure 8-5. Open the Advanced Security Settings window to see all users and permissions
for an object at once
466 | Chapter 8: Users and Security
your own name in the list, turning on the Replace owner on subcontainers
and objects option, and clicking OK in all the open Permissions windows.
Pages:
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650