how to monitor file deletion in a folder

[Guest Chris]

I have set file system auditing on the folder for deletion. Tested it and it

does log an event in Security log. The event ID is 560. But I also found

that there are other action shared the same event ID. I'd like to set up an

email alert once deletion happended but don't want others. How to do it?

 

Any other better way, such as free third party tools?

 

Thanks.

[Guest E. Cox]

You should be able to write a script to make a custom event log entry easily.

Using a tool like Sysinternals "Filemon" should assist in the script's

execution. Check out the Microsoft Script Center for solutions. Sysinternal

tools are also in Microsoft's site.

 

"Chris" wrote:

<span style="color:blue">

> I have set file system auditing on the folder for deletion. Tested it and it

> does log an event in Security log. The event ID is 560. But I also found

> that there are other action shared the same event ID. I'd like to set up an

> email alert once deletion happended but don't want others. How to do it?

>

> Any other better way, such as free third party tools?

>

> Thanks.</span>