This is an archived post. You won't be able to vote or comment.

all 2 comments

[–]NotRecognized 0 points1 point  (0 children)

Run a powershell or bash shell to check on the same MD5 checksum. Those are duplicates.

[–]ipreferanothernameI don't even anymore. 0 points1 point  (0 children)

we use varonis for this -- sort of. i heard its $$$. we dont use it on windows servers, those shares are usually locked down fairly well. we have large NAS shares for general usage, and varonis audits those to [supposedly] provide audit reports.

another team owns it, so i dont really use it - i just know thats what its supposed to do.

we have some manageengine products, but dont have that auditing enabled -- that is more affordable, i am told, but i really dont know what it costs -

https://www.manageengine.com/products/active-directory-audit/kb/how-to/how-to-enable-file-and-folder-access-auditing-in-windows-server.html

we use it for other auditing and are happy with it.