Auditing deleted files in File Server

You should take a look at the NetWrix File Server Change Reporter. It will tell you exactly who is making what changes to your file server. As far as I know this product takes all reqired events and reports on them. Automated reports tell you any time a change has been made, with information regarding who, what when and where each given change was made, also including before and after values of any changes. There is a free version, but the commercial version is best for your purposes, as it will tell you who is deleting the user folders (because freeware is crippled a bit and won?t who you WHO? only WHAT).
-Harry