Need to find out who is deleting network files

We continue having network files that are being deleted, however, they are being deleted off of shares that have ALOT of different users that are allowed to modify them.  If an entire folder is deleted off of a network drive, is there any way to look and see who could have deleted it.  I am able to restore these from backups everytime, but I would like to find and educate the user that is doing it.

Shares are on a Win 2k3 server running in a Win 2k3 AD environment.
tcbgeeksAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Brian PiercePhotographerCommented:
You need to enable auditing of object access (sucess) and then configure the folder audit delete

This article http://support.microsoft.com/kb/310399 is for XP but 2003 is essentially the same.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.