Step 1 – Scan Network To Discover Windows Server/Workstations

Step 2 – License Windows Server/Workstations

The Monitoring Group macro “&MG_WINDOWS” contains all licensed Windows machines

Pre-installed Rules implement all the enumerations of removable storage audits.

REL_USB, REL_CD_DVD and REL_FILE_SYSTEM provides the basic monitoring for file system security.

Step 3 – Plug/Unplug some USB drives on the licensed workstation to check that events are correctly fired.

Step 4 – Use pre-installed reports to see who did what, when