i trying to audit for folder or file deletion on file share, all desktop users are on file share and want to log everytime a file is delete. but i can only see event 5140 for share access. i active the policy object access on sucess or file. what is missing?
↧