Using Audit trail in NT 4.0

Hello,

I would like to find out if I am able to check who deleted files on a NT 4.0 server using the audit trail.

What sort of information can I get from an audit trail – does it just indicates who and when the person is using the system or files?

Appreciate any feedback from anyone.

THank you,
Joyce