Today one of the folders on the shared drive on the file server has been moved to another location. Fortunately I did search based on "*.doc" and modified today and it turned up on another directly. But I can't determine who did it.
I have not enabled any audit policy on this SBS2011 server. Can you show me how to track this type of activity - folder creation, file creation, file modification ...?
I guess this will create a huge amount of logs in Event Viewer...