Right now I have someone deleting user folder’s off of the File Server. I have set Auditing for the Everyone Group on that drive. What events. am I looking for to find the culprit?
