Guest pete0085 Posted November 23, 2007 Posted November 23, 2007 I was looking at the audit log for object access and it's not telling me much. What logs or event IDs will tell me if a file or folder was deleted from a shared folder and which user deleted or moved the file? Auditing is enabled for all catergories, both success and failures.
Recommended Posts