It is inevitable as the tide … someone on your network is going to delete a valuable folder or file and deny they did it, even though you know they were the last to make changes. Here is an advanced security tip to monitor activity on files and folders on the network.
Right click the file or folder you wish to keep track of and go to Properties \ Security \ Advanced \ Auditing on this screen click the Add button.
Now choose the members of the domain you want to monitor. In this example I just choose everyone to cover my bases.
After you have chosen the appropriate users, it is time to select what you want to audit. Since we want to monitor who deletes a folder, subfolders, and files make sure and place a check in those boxes. Click OK.
Now any the specified directory is deleted we can look in Event Viewer and see who was the culprit!