Is there any way to monitor change/deletion of critical files (user defined) and capture user who made change and timestamp?

Is there any way to monitor change/deletion of critical files (user defined) and capture user who made change and timestamp?

Is there any way (using OpManager; first choice workflow, second device templates) to monitor critical files; several flavors: files within a folder, files with specific names and/or (most important) using wildcard for *.dat, *.ini, *.exe?

Our Issue = we had a critical script file deleted and were not able to determine who deleted it or when.

 

Information needed at change or deletion to a file;

·         Name of the windows authenticated user who changed/deleted the file.

·         Timestamp of change/deletion

 

                New to ADManager Plus?

                  New to ADSelfService Plus?