Is there any freeware application that can monitor & log what a user is doing to shared folders/files in an NT Server? I am having problems of user(s) moving or deleting folders/files from my office server. Could be accidental or deliberate. And by the time this is discovered, we would have lost a couple of days work. Hopefully if there's such a monitoring tool available (freeware would be the best), it will act as a deterrent against deliberate acts of trashing data. Any help in this regard is appreciated.

auditing is built into NT. Go to help and look up auditing on your server. It will tell you how to enable it. I would suggest you be selective on what you audit since these entries go to your security event viewer log.

Thanks for the message, Wanderer. I hv tried the auditing before. It just show losts of incomprehensible lines of activities (and the numeral codes are bewildering). Am hoping for something simple like that found in Novell Netware where it actually shows User ID, time/date & what he/she did to a file or folder. Any idea about features such as those mentioned above? Thanks.

If I recall the file deletion/move code and description was pretty specific. Yes Netware suditing is a bit clearer but it even has its lack of clarity. Have you done a google search of audit software? Off hand I have not seen anything I would recommend to you.