Records Management Feature: Auditing

re: Records Management Feature: Auditing

ilovejolly — Sat, 29 Jul 2006 04:22:51 GMT

Very sorry to interrupt you.

This problem has puzzled me so long and I don't know who else I can ask for help except you.

I deployed the site to Form Authentication and I want to let the users to register on the site.After the user input the information I want the system add the user account to the site group so that all go on automatically.
I have three ideas:
1 Put a webpart including a CreateUserWizard control into the MOSS 2007 site's default page.
2 Build a ASPNET website in the MOSS2007 site(something like"http://ServerName:PortNumber/_layouts/MyWeb") including a registering page with a CreateUserWizard control.
3 Build a individual ASPNET website.

And I put the Group.Add method in the CreateUserWizard_CreatingUser event.

In the first or second condition,the site will display 401 error
or turn to the Login page of the sps site directly.(when I logon the site with a appropriate account and this will be done with no problem)
In the third condition, I can't manage to let the user logon the site automatically because the registering page has not been associated with the sps site.

Any ideas?

With many many thanks.

Joy

re: Records Management Feature: Auditing

dezo — Tue, 01 Aug 2006 06:24:34 GMT

Where are currently evaluating the RM functions within SP 2007, although the more detailed auditing can be configured e.g. site level events in a RM enviroment the auditing/activity on a object in a system is crucial and i have yet to see how SP can easily deliver that type of reporting. I am sure that as we progress out evaluation this may be more apparant.

re: Records Management Feature: Auditing

James — Wed, 02 Aug 2006 13:12:02 GMT

I have configured auditing for a document library but I can't find the audit log. Where is this available?

Thanks :),

2007 MOSS Resource Links (Microsoft Office SharePoint Server)

The Boiler Room - Mark Kruger, SharePoint MVP — Thu, 03 Aug 2006 19:11:46 GMT

Here is an assortment of various 2007 Microsoft Office SharePoint Server Documentation / Reference Materials...

re: Records Management Feature: Auditing

recman — Tue, 08 Aug 2006 20:40:18 GMT

@ Dezo:

It's great to hear to you're evaluating the capabilities of the 2007 release. Have you already joined the Office 2007 beta program? (http://www.microsoft.com/office/preview/beta/getthebeta.mspx)

Also, can you elaborate a bit on what kind of reporting capabilities you're looking for? We'd love to make sure that we understand your needs and have the right features in place to address them.

Thanks,
- Ethan Gur-esh.

re: Records Management Feature: Auditing

recman — Tue, 08 Aug 2006 20:50:16 GMT

@James:
Here is where you can find the reporting capabilities for the audit log.

1) Go to the main page of the root site in your site collection, and click on the "Settings" link.
2) In the "Site Collection Administration" section, click on the "Audit log reports" link.
You will now see a page called "View Auditing Reports". You can click on the "Run a custom report" link to manually specify the parameters for a report, or click on any of the pre-defined reports to generate a Microsoft Office Excel-based report of the audit log data.

Hope this helps,
- Ethan Gur-esh.

P.S.: If after step 1 you don't see an "Audit Log Reports" link, you may need to take the following step:

1) Go to the main page of the root site in your site collection, and click on the "Settings" link.
2) In the "Site Collection Administration" section, click on the "Site collection features" link.
3) Locate the Feature called "Reporting" in the list of features, and click its "Activate" button.

Once you've completed these steps, the audit reporting features will be available. (This is a work-around to a bug in the beta build that will be fixed for the next beta.)

re: Records Management Feature: Auditing

recman — Tue, 08 Aug 2006 20:53:44 GMT

@ Joy:

This is a Records Management blog, and as such I'm not sure this is the right forum to answer this question. That said, I'll follow up with you offline to help track down an answer for you.

And if any of our usual blog readers want to be included in that resolution, please send me an e-mail and I'll keep you in the loop as well.

Thanks,
- Ethan Gur-esh.

re: Records Management Feature: Auditing

Rick — Tue, 15 Aug 2006 20:19:44 GMT

Thanks for the audit info!
Do you know if it is possible to hook directly into the audit event so that more elaborate security can be applied? By this I mean, I want to check that a user can only share information with specific other groups. Unfortunatley, we have to do this for regulatory compliance.
We don't know of any other way to *prevent* someone who owns a site from inviting inappropriate members. I know we can audit after the fact, but we're told we need to prevent it in the first place.
Thanks, Rick

re: Records Management Feature: Auditing

recman — Sat, 19 Aug 2006 00:12:24 GMT

@Rick:

Rick, here's an answer to your question courtesy of James Sturms of the SharePoint product team.

Hope this helps,
- Ethan Gur-esh.

----------

There is no way to lock a SharePoint site down to only a specific set of groups, but there is a way to do the opposite: lock down a SharePoint site to *exclude* a specific set of groups.

The feature that supports this is called Security Policy and it is configured from SharePoint Central Administration. The administrator can set a policy on the web application to either grant or deny a group of users permissions everywhere within that web application.

There are four classic scenarios for security policy:

• Super Admin – you want to create a class of user who can see and update all content on all sites.
• Super Reader – you want to create a class of user who can read all content, e.g. a search crawler, an auditor, or a legal discovery search
• Deny All – you want to lock a specific group completley out of a web application, e.g. an investment banking site would need to lock out the research and traders groups to be legally compliant with SEC laws.
• Deny Write – you want to cap a specific group of user’s permissions at the read level, e.g. you want to make sure that no one can change content via the extranet, but they may still be able to read data.

There are no security change events in SharePoint.

re: Records Management Feature: Auditing

RickH — Mon, 21 Aug 2006 18:45:08 GMT

Thanks! I'll look into using the Deny to meet our needs. -Rick

Sharepoint 2007: Document/Records Management resource list V0.1

Arno Nel 2.0 — Thu, 31 Aug 2006 11:27:22 GMT

Planning Plan document management Chapter overview: Plan document management What is document management?

re: Records Management Feature: Auditing

ians555 — Fri, 08 Sep 2006 11:33:23 GMT

Has anyone tried accessing the SPAuditEntryCollection? There's also an SPAuditQuery class which looks suspisiously like the data entered in a custom report, but can't find out where it all hangs off?

re: Records Management Feature: Auditing

recman — Wed, 13 Sep 2006 04:31:47 GMT

@ians555:

These types of questions are better posed to the Office Beta newsgroups -- see http://www.microsoft.com/office/preview/community/newsgroups.mspx for a list of these newsgroups. We're trying to focus this blog on the broader aspects of the Records Management functionality in the 2007 release.

But since you asked, here's a short answer to how to query the audit log programmatically:

- The first step to querying the audit log is to create a new instance of the SPAuditQuery class. The constructor for this site takes a SPSite (which represents a "Site Collection" in SharePoint) as its input.
- You can then specify the query you with to run to any combination of: specific events (using the "AddEventRestriction" method), specific lists or items (using the "RestrictToList" and "RestrictToListItem" methods, respectively), specific date ranges (using "SetRangeStart" and "SetRangeEnd"), or users (using "RestrictToUser").
- Once you have your query defined, you can retrieve the collection of events matching that query by calling the "SPSite.Audit.GetAuditEntries" method, which takes the query as input. This method returns a "SPAuditEntryCollection", which is simply a collection of audit events that can be accessed by using the object model for that class.

Hope this helps. If you have any further questions, please post them to the newsgroups or use the "Contact" form on the blog to follow up with me.

- Ethan Gur-esh, Program Manager.

Records Management Feature -- Hold Orders

Microsoft Records Management Team Blog — Wed, 27 Sep 2006 10:18:00 GMT

In some of our first posts, we talked about the high costs of&nbsp;litigation &amp; discovery. And our...

re: Records Management Feature: Auditing

housewrightba — Wed, 18 Oct 2006 00:54:51 GMT

What permissions are required to run the audit log reports?

re: Records Management Feature: Auditing

recman — Sat, 28 Oct 2006 03:54:06 GMT

@ Housewrightba:

A user must be a “Site Collection Administrator” to run audit log reports for that site collection.

For more information about SharePoint’s security model (including the definitions of the various permission levels), see http://technet2.microsoft.com/Office/en-us/library/1474540b-0263-4dcc-8d4d-f77e65fe80ee1033.mspx .

Hope this helps,

- Ethan Gur-esh, Program Manager.

Security, Compliance, Server Hardening, and IP Protection

Microsoft SharePoint Products and Technologies Team Blog — Thu, 02 Nov 2006 03:45:29 GMT

Security is always important. I wanted to pull together a collection of all of the different security

re: Records Management Feature: Auditing

karenzhe — Tue, 30 Jan 2007 14:39:03 GMT

Is auditing a feature only designed for MOSS 2007 or also for WSS3.0?

If it is also designed for WSS3.0, how can we enable it?

Write to Audit log in custom event handler, workflow etc

marquard — Tue, 20 Feb 2007 10:35:34 GMT

How do you leverage the SharePoint built-in audit trail with custom events in your own event handler or custom workflow?

I simply need to write to the audit trail - but cannot locate which list to write to.

Sorry - SPAudit

marquard — Tue, 20 Feb 2007 10:48:00 GMT

A little more research pointed me to the SPAudit object as well as the whitepaper http://64.233.183.104/search?q=cache:LAaSeVZc6y0J:subliminalsystems.com/Downloads/ItemAuditing_Whitepaper.doc+SPAudit+WriteAuditEvent&hl=da&ct=clnk&cd=3&gl=dk

Also - search for ItemAuditing on google - that will explain you the details...

Solutions, Information Policies, Compliance and Auditing

Joel Oleson's SharePoint Land — Tue, 20 Mar 2007 02:14:38 GMT

Starting from auditing , expiration, ( information management policies ) content types , to the pivot

re: Records Management Feature: Auditing

databaseguy — Tue, 15 May 2007 20:51:43 GMT

1. Who, if anyone, owns the audit log for a document? Is it the Information Stewart? Is there a concept of owner for an audit log?

2. How long are they kept? For as long as the document is alive? And when the document is destroyed is the audit log destroyed?

3. If one were to request an audit log for a particular document, who would you ask?

Sharepoint 2007 Document and Records Management resource List (update)

Mirrored Blogs — Wed, 03 Oct 2007 18:19:35 GMT

Document and Records Management Definition Document Management According to Wikipedia : "A document

re: Records Management Feature: Auditing

chinmayvartak@gmail.com — Wed, 31 Oct 2007 09:32:58 GMT

I tried using Audit log feature of Sharepoint 2007. It works fine in windows Authentication environment, but in Form-based Authentication when user is in member group of any web-site , at that time user's activity on any document library is not recorded.

If form-based user is in owner group of any web-site then his/her activitoies are recorded.

2007 MOSS Resource Links (Microsoft Office SharePoint Server)

The Boiler Room - Mark Kruger, Microsoft SharePoint MVP — Mon, 12 Nov 2007 23:46:04 GMT

2007 MOSS Resource Links (Microsoft Office SharePoint Server) Here is an assortment of various 2007 Microsoft

Lenovo X300 video and what I've read this past week, compiled in record time

Satisfy Me — Sat, 03 May 2008 04:17:37 GMT

Wonder what to do when you're waiting for Outlook on one computer to move several thousand messages,

Sharepoint 2007 Document and Records Management resource List (update)

Arno Nel 2.0 — Mon, 28 Jul 2008 14:31:29 GMT

Document and Records Management Definition Document Management According to Wikipedia : "A document

tracking visitors | keyongtech

tracking visitors | keyongtech — Thu, 22 Jan 2009 07:28:05 GMT

PingBack from http://www.keyongtech.com/1976458-tracking-visitors

Microsoft Records Management Team Blog Records Management Feature | Paid Surveys

Microsoft Records Management Team Blog Records Management Feature | Paid Surveys — Fri, 29 May 2009 02:08:03 GMT

PingBack from http://paidsurveyshub.info/story.php?title=microsoft-records-management-team-blog-records-management-feature