- Open Local Security Policy => Local Policies => Audit Policy
- Change the “Audit object access” to “Success” checked
If you want to log every event, you can also checked the failure. - Go to the folder which need logging
- Go to folder permission => Auditing
- Add “Every One” with following setting
- List folder / read data
- Create files / write data
- Create folders / append data
- Delete subfolders and files
- Delete
- Finally check your event log to get the result.