deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-15 10:23:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity
Files
dfb49d6b0166d669548145f062c7b4705b3a2d1a
windows-itpro-docs/windows/security/threat-protection/auditing/file-system-global-object-access-auditing.md
Docs Allowlist Management 8cd92d66ee In all content, remove 
ms.technology = itpro-security paired with ms.prod = windows-client

Replace with

ms.subservice = itpro-security paired with ms.service=windows-client
2024-01-12 19:42:18 +00:00

1.7 KiB
Raw Blame History

title, description, ms.assetid, ms.reviewer, ms.author, ms.mktglfcycl, ms.sitesec, ms.pagetype, ms.localizationpriority, author, manager, audience, ms.topic, ms.date
title description ms.assetid ms.reviewer ms.author ms.mktglfcycl ms.sitesec ms.pagetype ms.localizationpriority author manager audience ms.topic ms.date
File System (Global Object Access Auditing) The policy setting, File System (Global Object Access Auditing), enables you to configure a global system access control list (SACL) for an entire computer. 4f215d61-0e23-46e4-9e58-08511105d25b vinpa deploy library security medium vinaypamnani-msft aaroncz ITPro reference 09/09/2021

File System (Global Object Access Auditing)

This topic for the IT professional describes the Advanced Security Audit policy setting, File System (Global Object Access Auditing), which enables you to configure a global system access control list (SACL) on the file system for an entire computer.

If you select the Configure security check box on the policy’s property page, you can add a user or group to the global SACL. This user/group addition enables you to define computer system access control lists (SACLs) per object type for the file system. The specified SACL is then automatically applied to every file system object type.

If both a file or folder SACL and a global SACL are configured on a computer, the effective SACL is derived by combining the file or folder SACL and the global SACL. This SACL (of such a constitution) means that an audit event is generated if an activity matches either the file or folder SACL or the global SACL. This policy setting must be used in combination with the File System security policy setting under Object Access. For more information, see Audit File System.

Related topics