This would be more like the property management having a record of what apartments are rented, and having a second list of who is renting apartments (but not which one), and the landlord wanting to know who is renting apartment 420 so they can draw up eviction papers.
The user probably wasn’t running as admin (elevated) while deleting the file, so as far as the system knows, he may not be allowed to know which process is accessing the file.
Bad analogy.
This would be more like the property management having a record of what apartments are rented, and having a second list of who is renting apartments (but not which one), and the landlord wanting to know who is renting apartment 420 so they can draw up eviction papers.
The user probably wasn’t running as admin (elevated) while deleting the file, so as far as the system knows, he may not be allowed to know which process is accessing the file.