I have a File server running W2k Server on an NT4 Domain. Some one has deleted stuff of the public access drive.
Is there anyway that I can create an audit of UserNames who delete stuff of this server. I've had a look in Secpol but can't find anything.
Any assistance would be greatly appreciated