Hi all, In smbstatus I can view the active connections, PID, client, IP add, date, etc... I want to view what files are opened by a specific user? what files are added or deleted? what if somebody deleted all the files, how can I trace it? thanks in advance for any info, warren