Object Access event log - how to check default ACL on windows server 2003

Question

MAster,

I need to enable directory auditing on windows server 2003 to a specific directory.

So first of all i set in the Defaul Domain Controller Policy / Security / Local / Audit / Object access audit (both success and failur)

So, auditing my directory work well, but unfortunatelly the event log is full with:

• Source: Security, EventID 562; Microsoft Exchange, C:\Program Files\Exchsrv\bin\store.exe

  So, i check this file properties (security-->advanced ---> audit) but nothing audit specific properties set for this file.

How can i check which file have this settings? Any list where i can check? How to turn on Object Aceess to this file?

Thank you.