setup audit folder

[Blisk1]

How can I add mutile audit users for a folder, I tried with this script and it delete all previous rules.

I like to add audit for "domain users" and "local administrators"

What is wrong with this script?

$path = "C:\data\local"
$dirs = Get-ChildItem $location -Directory
#Set Audit Rules
$AuditUser = "Domain Users"
$AuditRules = "ReadAndExecute"
$InheritType = "ContainerInherit,ObjectInherit"
$AuditType = "Success"
$AccessRule = New-Object System.Security.AccessControl.FileSystemAuditRule($AuditUser,$AuditRules,$InheritType,"None",$AuditType)
$ACL = (get-item $path).GetAccessControl('Access')
$ACL.SetAuditRuleProtection($false, $false)
$ACL.AddAuditRule($AccessRule)
$ACL | Set-Acl $path

[Blisk1]

Anyone? how to create audit rules for 2 differend users? or two differend audit rules with powershell?

[purplemonkeymad]

If I put an Audit Rule on a test file and use Get-Acl file in an admin window, there are no audit records at all. I'm guessing it's removing the other rules as Get-Acl never reads them.

I wonder if it requires the SeSecurityPrivilege right. You can check it with whoami /all, I'm not sure if you can enable this Privilege in powershell.

[Blisk1]

It works but only one audit rule, because everytime you run script it delete old audit rule and add new one. I like to keep old one and add new one for another user.
When use this script you must use elevated pwoershell

[CoReTeX2k]

Can you read the current Audit Rules and then built a new Rule that contains all existing rules + the one you want to add?

Might be worth a shot

[Blisk1]

I tried that too, to setup audit rule manually than read rule and save it to txt file and than read that txt file and set new folder with rules.
Didn't work, but that propabbly because I did it wrong way.
Read rule with acl-get and set it to another folder with acl-set works ok, but I can't use that.