Activation of File Control
In the Domain Group Policy, you can enable this option (filtered only for the machines that require it) under:
Advanced Configuration > Object Access > Control File System
This setting can also be managed directly in the local policies of the file server(s).
Subsequently, you need to extend the control to the folder to be monitored:
From Security > Advanced of the folder:
Here you can specify additional checks for the folder.
Different checks can be configured for individual users or groups:
Specifically:
These are the suggested controls for a complete BusinessLog monitor.
You can, of course, limit or increase the audit level according to company policies.
⚠️ Note: All selected machines and users will be subject to control.
Do not overuse this function, otherwise you may generate thousands of log entries per day.