Auditing Read/Write of Large Files
Is there any way to have ADAudit send alerts out if a large file (eg >500MB) is read or written? I have a situation where people are dropping full uncompressed dvd files to our shared drives and then wonder why they won't stream over an adsl line, so I'd like an alert when a file gets written and I can go discuss alternate ways to distribute the videos.
My shared drives are all on NetApp CIFS, and ADAudit works well for other monitoring like mass deletions/etc.