Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Reporting on access to C$ (etc.) What does it take on the Microsoft side?

I see CSMARS 6.x has come canned reports that look for events for C$ admin$ etc, but so far (even though I generate events, and have installed SNARE) I am not seeing any events reporting "admin-share" access. Wht more do I need to do to the Microsoft server, host, or domain to get this working?

169
Views
0
Helpful
0
Replies
CreatePlease to create content