How do you audit a move or copy.
Since Windows File System sees everything as an add and delete, rather than a copy or a move, Change Auditor only sees the move or copy changes as adds and deletes.
Change Auditor Agents are required on both the source and the destination, to audit the complete event. The best way is to look for the events that happen at the same time, on the source computer, one is a file/folder deleted in the case of a 'move' and on the destination computer, the other is a file/folder created in the case of a 'move or copy'. These events will show you where the file or folder is 'moved or copied' to and who did the action.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center