Yes, this is the following enabled
Vserver State Event Types Log Format Target Directory
----------- ------ ------------------ ---------- ----------------------------
SVM01_CIFS_HOME
true file-ops, evtx /home
cifs-logon-logoff,
user-account,
audit-policy-
change
Unfortunately I cannot visit the link posted 'cos I don't have the login ID with me.
I must to wait Monday 'cos in office sorry.
For now thanks a lot, you gave me a good and big help!