Enable Auditing-Folder Moved

[jsetaro]

I am testing out folder auditing on one of my servers because my users keep dragging folders. On a couple of folders, I setup auditing for that folder only and to log only "Delete". That works. But, whenever someone opens an Excel spreadsheet and saves it to the folder, it logs the .tmp file as a delete. It also logs when any new file is copied into the folder. This is not good because I also get an email when the event ID 560 is generated. ID 560 is used for deleting the folder, the .tmp file, and copying new files. I get bombarded with emails. I cannot filter out anything because the log is the same for all three processes. I've removed the Audit inheritance on the folder, and tried replacing the audit on all subfolders and files. I've tried it on another 2000 AS and a 2003 server with the same results. Any help would be greatly appreciated.