How to enumerate dictories where auditing is enabled?

[Guest Claude Lachapelle]

Hi!

 

We are in the process of enabling auditing on some files servers, but it

seem somebody already did it in the past, since as soon as we are enabling it

in the local security policy, we got a lot of events about directory being

acceded successfully/failed in the security log.

 

Now the question is : how we could enumerate all directories where Auditing

have been already enabled?

 

Thanks.

 

Claude Lachapelle

Systems Administrator, MCSE