In the past I have had some problems with users deleting files out of some shared directories that didn't belong to them. With Novell it was very easy to see which user accessed the file but I'm having troubles finding a good way to monitor user access in 2003 Server. Anybody have any suggestions or links

first you have to enable auditing on your domain or network. you would go to the default domain under active directory users and computers, right click the default domain and select "properties". then choose edit at the next screen. Look under "computer settings" and then from there you will have to find the key that says auditing and make the appropriate choices. On the file you want to audit, you right click it and choose properties and then choose "sharing and security" then "security" then choose the "advanced" button and from there you will see another button called auditing. You can specify who you want to audit. check the "event viewer" under "security" to see the when the file and who has accessed the file. You could also change the security settings of that file to "deny" modify. Just right click the file and choose sharing and security...you should be able to figure out the rest...I hope this helps...

Thanks for the reply. I was actually hoping to monitor all files and users rather than specific ones and also get it out of event viewer which can get a little cluttered. Will all files and folders inside a directory be monitored if you enable auditing?

Yes...I will get back to you later....