is there a way to determine which files a user has been copying from the file server ? SBS2008
We have a concern that a user may be stealing documents from the server .
Is there a way to determine historically what files a user may have been copying ?
And going forward what is best practice for determining this and preventing this ?