Is there any way to audit on a 2000 server when a new share has been created? I enabled auditing on the "Shares" registry key. But that logs even when the registry is being scanned for viruses and being backed up. It also does not log the folder being shared and the share name. I am researching a means of server replication (High Availability), which will replicate new data, but not new shares. So if someone else creates a share and does not let me know, I will not be replicating that new share name. The data will be available, but not the share name.