You can find detailed documentation about auditing on TechNet. I'd read
that, if you want details.
Generally speaking, you need to:
1) enable auditing via the system/domain policy
2) enable auditing of all required actions at the object level (file,
folder, drive, etc.)
3) see the entries in the event log
Ask a Question
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.