If you enable the recycle bin feature, when the file is deleted it'll go to the .recycle/usernamethatdeletedit/folderstructureforoldfile/filename.
Also, if you enable logging on CIFS you can probably see who deleted it. That is, assuming that the cyclic logs aren't refreshed before you see who does it.