Audit when a file gets deleted or moved on a 2003 DC 1

[centraladminman]

Can anyone tell me how I can audit when a file gets deleted or moved on a 2003 DC. I enabled all auditing in GP but it started logging everything and I mean everything. I am mostly just concered about logon, logoff, deletion, and moving of files.

Thanks in advance,

 

[Roadki11]

You can do this at the directory level if you want. get into the security tab for the folder and click advanced, under the auditing tab. You can add users or groups and select what you wanted audited.

hope this helps,

RoadKi11

 

[centraladminman]

I deserve a wack against the head for missing that one. I has been long day, or a long week for that matter.

Thanks,
roadki11

 

[Roadki11]

Your welcome, glad i could help. we all have days and or weeks like that.