> is there any way I can find out if this employee did delete it? Are you trying to determine whether it /was deleted/ or /who really did it/? The former should be as simple as "ls" -- is it there or not? The latter is probably impossible unless the NAS device has some sort of log. -B