You can find detailed documentation about auditing on TechNet. I'd read
that, if you want details.
Generally speaking, you need to:
1) enable auditing via the system/domain policy
2) enable auditing of all required actions at the object level (file,
folder, drive, etc.)
3) see the entries in the event log
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.