DeviceLock Service : Managing DeviceLock Service for Windows : Service Options : Auditing & Shadowing : Audit folder operations
  
Audit folder operations
Enable this parameter to turn on the audit logging of events associated with operations on folders, such as creating (writing), renaming, reading (opening), and deleting folders. When this parameter is disabled, all events associated with folder operations will be excluded from auditing.