Have a scenario where some domain controllers are going to be
virtualized onto Hyper-V and would like to set up monitoring to alert if
any of the virtual server files are attempted to be copied. With the
file monitoring options available in Change Guardian, what approaches
might accomplish this? Since it would not really be known where it
could potentially be copied to, using the file write is not reasonable.
Initial capability could be to lock down the file permissions then alert
on permission change and read events by anything other than whatever
systems accounts would regularly touch the vhd files.


94hokies's Profile: https://forums.netiq.com/member.php?userid=7949
View this thread: https://forums.netiq.com/showthread.php?t=52066