locked
Folders Audited by Default on Vista RRS feed

  • Question

  • Hi,

    After I turn on auditing for object access, I see these folders being audited by default:

    \windows\servicing
    \windows\system32\advancedinstallers
    \windows\system32\boot

    Can someone verify that they have these on audit too? Why are they being audited? Are these important folders to keep track of ?

     

     

    Wednesday, February 28, 2007 11:18 PM