Auditing on a folder

[Guest davidb]

Hi,

I have been trying to set up Auditing on a member server. I need to

audit all the subfolders within a certain shared folder to find out

who has been moving folders around within the share.

 

I enabled object auditing in the local security policy on the server,

and then I went to the top folder - right-clicked and added into the

auditing section the group of users I need to monitor. I then set the

relevant attributes to be logged ('Write Attributes' Successful,

'Delete Subfolders and Files' Successful,

'Delete' Successful)

 

Nothing is logged in the security event log?

I tried adding a username directly in case it didn't like the use of a

user group, but it made no difference (I moved some folders around

while logged in as that user)

However, when I add the administrator account (with which I am logged

into the server) and then move some folders, they are logged?

 

Any ideas? I've been trying to get this to work for days now and made

no furthur progress.

Am I missing something out?

 

thanks for any help,

Dave