Hi, I've a problem at work, one of my co-worker on different shift is causing problems by putting a filter to certian folders in Outlook so that other workers on duty on different shifts cannot access the contents of those folder in the performance of their job.

It's no use in talking to the immediate boss, who considers him as his personal pet, willing to blame other workers for his antics.


I already know how to remove the filter, but other workers don't, besides I want a more permanent solution to this problem. (He's been deliberately witholding information he was supposed to pass on so that other workers can look foolish.)


I want to be able to trace digitally, get a time stamp when the filter was applied to those folders so that I could formally charge him (he's the only one with access to computers during his shift) with sabotaging the work.

Does anyone know how to get a time stamp when the filter was applied or setting was changed?

use NTFS to enable auditing

see this for the concept