To set up auditing of files and folders
Click Start, click Run, type mmc /a (note the space between mmc and /a), and then click OK.
On the File menu, click Add/Remove Snap-in, and then click Add.
Under Snap-in, click Group Policy, and then click Add.
In Select Group Policy Object, click Local Computer, click Finish, click Close, and then click OK.
In Local Computer Policy, click Audit Policy.
Local Computer Policy
In the details pane, double-click Audit Object Access.
In the Audit object access Properties dialog box, click the options you want, and then click OK.
You must be logged on as an administrator or as a member of the Administrators group to set up auditing of files and folders. Group Policy is available only to administrators.
If you have previously saved a console with Group Policy, you can open the saved console and go to step 5.
After you enable auditing of files and folders, you must specify which files and folders to audit. For more information, see Related Topics.