Recently, I find some users accidentally relocated some shared folders. I want know I can log event the some file being moved? Can I do so with security log? Thanks

You need to enable Folders/Files auditing in GPO and then configure folders/files which you want to monitor (which actions) Please read this Microsoft article http://technet.microsoft.com/en-us/library/cc759721%28WS.10%29.aspxRegards, Krzysztof

Hello Netizen99, We suggest enabling Audit object access policy, it will audit each event when a user accesses an object. Objects include files, folders, printers, Registry keys, and Active Directory objects. Windows & Active Directory Auditing http://www.windowsecurity.com/articles/Windows-Active-Directory-Auditing.html BrentPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.