How inheritance affects file and folder auditing
After you set up auditing on a parent folder, new files and subfolders created in the folder inherit auditing. If you do not want them to inherit auditing, in Auditing Entry for File or Folder Name, in Apply onto, select This folder only when you set up auditing for the parent folder. In cases where you want to prevent only certain files or subfolders from inheriting auditing, right-click the file or subfolder that you want to prevent from inheriting auditing, click Properties, click the Security tab, click Advanced, click the Auditing tab, and then clear the Inherit from parent the auditing entries that apply to child objects. Include these with entries explicitly defined here. check box.
If the check boxes in Auditing Entry for File or Folder Name are shaded or if, in the Access Control Settings, the Remove button is unavailable, then auditing has been inherited from the parent folder. The ways to make changes to inherited auditing are:
| • | Make the changes to the parent folder, and then the file or folder will inherit auditing. |
| • | On the Auditing tab, clear the Inherit from parent the auditing entries that apply to child objects. Include these with entries explicitly defined here. check box. Now you can click Edit or Remove to make changes or remove auditing. However, the file or folder will no longer inherit auditing changes from the parent folder. |
Set, view, change, or remove auditing for a file or folder
Selecting where to apply auditing entries
