Getting File audit settings This topic contains 4 replies, has 4 voices, and was last updated by Toby Hessellund 1 year, 8 months ago. Author Posts March 11, 2015 at 7:55 am #23238 ertuu85Participant Hello, I've found several sites that show how to set the file audit settings...but I haven't had much luck finding any information about retrieving audit settings on a particular folder... I'm trying to write a health check script that will verify certain file auditing is in place such as.... %systemroot% has audits set up for 'failures' on 'CreateFiles" for the 'everyone' user. I know how to set this up using: New-Object System.Security.AccessControl.FileSystemAuditRule("Everyone","CreateFiles”,"none","none",”Failure") But I'm unsure how to query a folder and get it's audit settings for a particular user (almost 'everyone' user in my case). Any help or tips would be greatly appreciated. March 11, 2015 at 8:13 am #23239 Dave WyattModerator You'd use the Get-Acl command with the -Audit switch to retrieve the folder or file's current settings: $acl = Get-Acl C:\Some\Folder -Audit $acl.Audit March 11, 2015 at 8:23 am #23240 ertuu85Participant God I feel dumb lol.... That was very easy, thanks again for such a direct and easy solution! January 7, 2016 at 12:23 pm #33642 Patrick BurwellParticipant So how do you check access to a file? January 7, 2016 at 5:00 pm #33649 Toby HessellundParticipant $acl.Access Author Posts You must be logged in to reply to this topic.