Google Answers Logo
View Question
 
Q: Computer advanced user know-how ( No Answer,   3 Comments )
Question  
Subject: Computer advanced user know-how
Category: Computers > Operating Systems
Asked by: davidavid11-ga
List Price: $5.00
Posted: 02 Aug 2006 09:36 PDT
Expires: 01 Sep 2006 09:36 PDT
Question ID: 751872
I have a dell laptop running by Windows XP. I turned it off on a
stand-by mode before I left it. There are two user, admin and another.
The other user doesn't need a password to get in. Now, how could I
know:

1- whether my computer was turned on during the period that I was not with it.
2- and if turned on, what of kind of things have been done on it.
Answer  
There is no answer at this time.

Comments  
Subject: Re: Computer advanced user know-how
From: feldersoft-ga on 02 Aug 2006 15:07 PDT
 
Use the search files or folders utility to do it.  You can tell it to
search for files that were modifed after a specific time.  Use the
approximate time period when you suspect the computer may have been
used.

This will give you a reasonable idea whether or not the computer was
used and what they may have been doing.
Subject: Re: Computer advanced user know-how
From: keystroke-ga on 03 Aug 2006 09:33 PDT
 
Using the above method will not be strictly accurate, as soon as you
turn on your pc it writes to files and changes dates on files.

Turning it on will probably overwrite the same files as the ones the
user would have accessed when bringing the computer out of stand by
mode.

You best option is to check the Event Viewer

START -> Settings (or Control panel) -> control panel if not already
done -> Administrative tools -> Event viewer.

now try to find the time you think the computer was accessed and
search for any "Process was started" or more specifically search in
the System Log for any Information type entries under the source
"eventlog". Open the event and if it says information close to "The
Event log service was stopped." This is when your system went into
stand-by. Check the next newer event, if it says something such  as
"The Event log service was started." and the time this occurred is the
same time as you suspect your computer to have been used you know it
was turned on and someone tried to use it.

Ideally to get all this type of information you should be logging "log
on" or "Priviledged Access" attempts within your security logs.

--Keystroke-ga
Subject: Re: Computer advanced user know-how
From: tomhawk-ga on 23 Aug 2006 16:35 PDT
 
perfect answer keystroke...

Way to GO

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy