Hi samba team, Because some people cut/paste some directory I need to activate auditing for delete, rename file and directory operation. I want to know users and file or directory which delete or rename opration has be made. I activate full_audit but I don't have theses informations : mjb|xx.xxx.x.xxx|realpath|ok|/rsrv/vol2/data1/groupes. What vfs objects can I use for that ? thanks St?phane Purnelle ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique Corman S.A. Tel : 00 32 (0)87/342467