When a file/folder is moved how does Netwrix Auditor – Fileserver report this?

File Server
6.5 and older
7.0-8.5
https://kb.netwrix.com/724
Copy Article URL Copied

When a file/folder is moved how does Netwrix Auditor – Fileserver report this?


The following explains how the audit trail appears when a folder or file is moved FROM an audited location TO an audited location. If the file/folder is moved to a location that is not Audited there will be NO audit trail other than the Removal from the original location. The behavior is depend on Audit trail settings:

In Basic mode:
File/Folder Removed from original location
File/Folder Added to new location – but this depends on several conditions, like applications or methods used for moving the object.

In Enhanced mode:
File/Folder Removed from original location
File/Folder Modified in new location

In Netwrix Auditor 9.0 and newer file/folder moves are reported properly.

Go Up