File Sharing Information

Hi Guys

i want some information when any user shares or unshared any resource on a network some window service or filter driver send this file information to the network administrator. so my question is that how can i intercept file sharing/unsharing call? do i need to develop a file filter driver or network filter driver? or i can get this information form user mode without any kernel stuff?