How to track file/folder add or delete

[eng69]

I have a server running server 2003 r2. We have files that are mysteriously appearing/dissapearing. Is there a way to track file/folder creation and deletion? I only need it for two of our 4 drives. I turned on 'audit object access' and it fills my log with what i need, but it also fills it with stuff i dont need. 99% of what it produces I dont need.

Can anybody point me in a direction of how to audit file creation and deletion of only certain drives?

Thanks,

 

[strayrog]

There is always watchdog. It is a little expensive for what is does and it is a little cluncky, but it works.

 

[itsp1965]

You are on the right track, but if you want to limit auditing, try only auditing the folders where files are disappearing and not the whole drive.