I need to find out who is copy a file to the network (actually they are replacing an existing file).
So I enabled auditing for the server using this
guide and enable object access on the folder.
This works for the folder. But it's logging all folders. How do I restrict it to just the folder I want to monitor?