如何知道谁修改了web.config文件 [英] How to know who has modified the web.config file

问题描述

我们有一个实例，有人在我们的sharepoint服务器的web.config文件中添加了一行。

请告诉我们如何找出谁修改了web.config文件。有没有机制可以知道？

谢谢。

---

知识就是力量。

解决方案

Hello Manoj，

仅在您之前已启用对象访问审核时该文件已被修改。如果是，则它将出现在安全事件日志中。



要启用该审计，您必须通过策略在服务器本身上执行此操作。然后，您将在要审核的文件/文件夹上设置适当的SACL。

使用以下链接配置对象访问审核 

https ：//support.microsoft.com/en-gb/help/814595/how-to-audit-active-directory-objects-in-windows-server-200

Hi,

We had an instance somebody has added a line to the web.config file in our sharepoint server.

Please let us know how to find out who has modified the web.config file. Is there any mechanism to know?

Thanks.

---

Knowledge is power.

解决方案

Hello Manoj,

Only if you already had Object Access Auditing enabled before the file was modified. If so, then it would be in the Security Event Log.

To enable that auditing, you would have to do it on the server itself, via policy. Then you would set the appropriate SACL on the file(s)/folder(s) you want to audit.

Use the following link to configure Object Access Auditing 

https://support.microsoft.com/en-gb/help/814595/how-to-audit-active-directory-objects-in-windows-server-200

这篇关于如何知道谁修改了web.config文件的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！