I think by using a combination of these to links...may help you with it.

First drive must be NTFS, then turn auditing on...then set audit on the files associated with the usb


http://support.microsoft.com/kb/310399

http://everything2.com/e2node/Disabl...Windows%2520XP

MLF