Disable Auditing on Specific Folder

[Richard Long - richard2long4u269]

Hello,

My organization has auditing enabled on our hosts via Group Policy. We have a couple Windows Server 2012 R2 hosts that run Tomcat which is generating a very large number of Security logs every second. The Event ID is 4663 and it generates logs every time tomcat9.exe accesses something in its install directory. Is there a way to disable file access auditing on this folder while leaving the auditing on for the rest of the folders on the host?

Thanks

Continue reading...