I have a windows 2008 r2 server which is configured as a file server. We have a shared common folder on one of our volumes which has shadow copies enabled. What I would like to know is if its possible to have an audit event created when an end user restores a file or folder from that share which has previous versions enabled..? If its not possible under 2008 r2 is there any consideration to putting this in under 2012?
Thanks,
John