Network Folder has been moved

  Today one of the folders on the shared drive on the file server has been moved to another location. Fortunately I did search based on "*.doc" and modified today and it turned up on another directly. But I can't determine who did it.
  I have not enabled any audit policy on this SBS2011 server. Can you show me  how to track this type of activity - folder creation, file creation, file modification ...?
  I guess this will create a huge amount of logs in Event Viewer...

Who is Participating?
Naser GabajConnect With a Mentor E&P Senior Software SpecialistCommented:
if they had access to the files in the first place then it is not a security issue, it is an incorrectly configured share.
Also, To see who created a folder or File in Network share:
properties-->security-->advanced-->owner "this will tell you his name if he logged in himself".
sgleeAuthor Commented:
I followed properties-->security-->advanced-->owner and saw the name of the user.

Now how can I enable Audit on file/folders so that it records time and date of any activity or that is just too much to log?
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.