Is possible in CIFS auditing to see all changes on one folder or document (accessing, deleting, editing,....).
Now i can only see logoff and logon events, but customer wants to track all changes on documents.
I saw netapp documents but i still don't know how to track all activities on documents.
Do you have any idea? Thank you!
I've found the solution. In windows explorer i used this command on the folder i want to track:
FOLDER> right click -> Properties -> Security -> Advanced -> Auditing -> Add -> "Everyone" -> Check Names -> OK
Click in "Successful" and "Failed" boxes for "Create Files / Write Data", "Create Folders / Append Data", and "Delete".
"OK" back out.
It works OK now.