Track usage of shared folders

To track the usage of shared folders, there are several approaches you can take depending on the system you’re using and the level of detail you want. Here’s a general breakdown of how you can track shared folder usage across different platforms:

1. Windows (Using File Server Resource Manager or Event Logs)

If you’re working with a Windows server and want to track the usage of shared folders, you can use File Server Resource Manager (FSRM) or Windows Event Logs.

Using File Server Resource Manager (FSRM)

• File Access Auditing:

  • Enable audit logging to track who accesses or modifies files within shared folders.

  • Configure FSRM to track events like file creation, modification, deletion, or access.

  • This can help you monitor any activity on the shared folders, providing information about who accessed the files and when.

Using Event Logs

1. Enable Object Access Auditing:

   • Go to Local Security Policy → Advanced Audit Policy Configuration → Object Access.

   • Set auditing for Success and Failure to track file access.

2. Access Event Logs:

   • Go to Event Viewer → Windows Logs → Security.

   • Look for Event ID 4663 (which tracks file or folder access events).

2. Linux (Using Auditd and Syslog)

On Linux-based systems, you can use auditd or other logging tools like syslog to track access to shared folders.

Using auditd

1. Install auditd (if not already installed):

   bash
   CopyEdit
   sudo apt-get install auditd audispd-plugins
   

2. Configure audit rules to track file access. For example:

   bash
   CopyEdit
   auditctl -w /path/to/shared/folder -p war -k shared_folder_access
   

   • -w: Watch a path

   • -p: Permissions to audit (w for write, r for read, a for attribute changes)

   • -k: Custom key to identify the rule

3. View logs:

   bash
   CopyEdit
   ausearch -k shared_folder_access
   

3. Google Drive / OneDrive / Dropbox (Cloud Solutions)

If you’re using cloud storage solutions like Google Drive, OneDrive, or Dropbox, they typically offer built-in tracking and audit logs.

Google Drive

• Activity Dashboard: Google Workspace provides an Activity Dashboard that lets you see who viewed or edited a file in shared folders.

• Google Drive Admin Console: If you’re using Google Workspace, admins can use the Audit Log to track file activity in shared folders.

OneDrive for Business

• OneDrive Activity Logs: Use the Microsoft 365 Security & Compliance Center to review detailed audit logs of file accesses, edits, and shares in OneDrive.

Dropbox

• Dropbox Business Admin Console: Admins can access an Activity Log that details who accessed or made changes to shared folders or files.

4. Network Attached Storage (NAS)

For systems like Synology NAS, QNAP, or other network storage devices, most come with a built-in feature for tracking file access:

Synology DSM

• File Access Logs: Enable file auditing through DSM’s Log Center to monitor access to shared folders.

QNAP

• Audit Log: QNAP NAS has built-in auditing features that allow you to track file access and changes in shared directories. This can be configured through the Control Panel.

5. Third-Party Tools

If your system does not have native support or you want more advanced features, there are various third-party tools that can track shared folder usage:

ManageEngine FileAudit

• Tracks file access events on Windows file servers in real time.

• Provides detailed reports on who accessed or modified files, as well as alerts.

Netwrix Auditor

• Tracks who accessed files, when, and what changes were made in shared folders.

• Supports both Windows and network-based shared folders.

6. Automated Reports and Alerts

If you want to receive automated reports or alerts about specific events, most tools (native or third-party) allow you to configure notifications when specific actions occur, such as:

• File created/deleted.

• Folder shared.

• Unauthorized access attempts.

By enabling auditing, configuring log aggregation, and using proper reporting tools, you can effectively track shared folder usage in your organization.

Let me know if you need help with a specific platform or configuration!