Is there a way I can audit who is moving folders on our 2003 File Server, as we've had to instances now where someone has moved a folder either by accident or on purpose and as no one is owning up to it, I'd like to be able to add some sort of traceability to folders being moved. I know you can audit files and folders being deleted via Auditing in the advanced tab on the folder properties/security, but am unsure whether you can audit files and folders being moved in the same way. Any help appreciated

Hello,I am not sure if moving folders can be tracked with w2k3 auditing.Isaac Oben MCITP:EA, MCSE

Hi Issac, thxs for the quick response, I thought the same, but wanted a 2nd opion, was hoping maybe that if I added Create Folders/Append Data to the Audit that this might show the changes, but nothings showing up in the Event Viewer and wondered if I'd missed a setting somewhere. Looks like I might just have to reduce the amount permissions people have and if they want anything moving in future do it for them. Thxs Vince

HelloCreate folders/Append Data should be able to show on Audit..you may have to filer your logsIsaac Oben MCITP:EA, MCSE

Hi Im assuming your talking about a mapped shared network drive? What I usually do is ask the user for the file/folder their missing and i do a quick search for that file or folder using the windows search function. Usually its just being moved by accident,(drag and drop) If its been deleted well you can do a quick undelete lots of programs out their covering this topic, Or go to your backups courtesy of: http://www.techsupportforum.com/microsoft-support/windows-nt-2000-2003-server-2008-server/236845-windows-2003-file-folder-audit-software.html Denying the permission to move or copy folders takes prevalence over any other permissions.Good business is where you find it. Trust will empower your Endeavour. Reliability and transparency shall form strong partnerships. Nothing exceeds lifes excess.

Hi, The move operation is actually deleting the folder from the original folder and creating it on the new folder. To audit the operation, please ensure that the Audit object access policy has been applied to the computer and the auditing is configured correctly for the folder. Thanks.This posting is provided "AS IS" with no warranties, and confers no rights.