In the SBS 2003, how do I apply a policy to Audit/Trace the documents which are located in U:\ drive to trace document those are Deleted and copied into a Flash/Optical divice?

What the best way to assign Access Restrictions to Files & Folders? Could this be acheived 'better' through a GP?