DeviceLock Service : Managing DeviceLock Service for Windows : Auditing, Shadowing & Alerts (Regular Profile) : Summary of Audit and Shadowing Rights by Device Type : Windows Mobile
  
Windows Mobile
Rights applicable to the Windows Mobile device type:
Audit: Read
Read File action, file names and flag (Sync) are written to the audit log.
Audit: Write/Print
Write File, Delete File, Rename, Overwrite and Create Shortcut actions, file names and flags are written to the audit log.
Audit: Execute
Invoke and Execute actions, file names and function (procedure) names are written to the audit log.
Audit: Read Non-files
Read Calendar, Read Contact, Read Favorite, Read E-mail, Read Attachment, Read Note, Read Task, Read Media, Read Pocket Access and Read Unidentified actions and object names are written to the audit log.
Audit: Write Non-files
Write Calendar, Delete Calendar, Write Contact, Delete Contact, Write Favorite, Delete Favorite, Write E-mail, Delete E-Mail, Write Attachment, Delete Attachment, Write Note, Delete Note, Write Task, Delete Task, Write Media, Delete Media, Write Pocket Access, Delete Pocket Access, Write Unidentified and Delete Unidentified actions and object names are written to the audit log.
Shadowing: Write/Print
Files are written to the shadow log.
Shadowing: Write Non-files
All data that contains non-file objects (Calendar, Contacts, Tasks, etc.) is written to the shadow log.