7.

The Manual Way

If you’ve gone through all 6 programs above, you may have noticed that there is no perfect tool that comes with all features to monitor your shared
folders such as logging, notification, actions and etc. Although they can all tell which files are being accessed and who is accessing them, it is still not
possible to show the exact actions by the users such as if the files are being copied or deleted since it only shows read or written. If you need
detailed logging information, there is actually a way to enable auditing without using third party tools but it requires more steps. Here is how to do it in
Windows 7.

1. Click on the Start button, type Local Security Policy and press Enter.

2. Expand Security Settings > Local Policies > Audit Policy > and double click on Audit Object Access.

3. Tick on the Success checkbox and click OK.

4. Right click on the shared folder that you want to monitor and selectProperties.

5. Go to Security tab and click the Advanced button.

6. Go to Auditing tab and click the Edit button.

7. Click the Add button, type EVERYONE at the object name box and click OK.

8. An auditing entry window will open allowing you to log the actions that you want. If you want to monitor deletion of files and folders, simply tick the
“Delete subfolders and files” and “Delete” successful checkboxes. Do not tick everything because that will easily fill up the event logs making it
harder for you to audit.
Whenever a file on the shared folder which you have enabled auditing is deleted, it will be logged and can be viewed from Event Viewer. Go to
Control Panel > Administrative Tools > Event Viewer. Expand Windows Logs and click on Security. The event below is an example of a file x-ray.exe
being deleted from the shared folder by the 192.168.2.17.