|
|
Subject:
Computer advanced user know-how
Category: Computers > Operating Systems Asked by: davidavid11-ga List Price: $5.00 |
Posted:
02 Aug 2006 09:36 PDT
Expires: 01 Sep 2006 09:36 PDT Question ID: 751872 |
I have a dell laptop running by Windows XP. I turned it off on a stand-by mode before I left it. There are two user, admin and another. The other user doesn't need a password to get in. Now, how could I know: 1- whether my computer was turned on during the period that I was not with it. 2- and if turned on, what of kind of things have been done on it. |
|
There is no answer at this time. |
|
Subject:
Re: Computer advanced user know-how
From: feldersoft-ga on 02 Aug 2006 15:07 PDT |
Use the search files or folders utility to do it. You can tell it to search for files that were modifed after a specific time. Use the approximate time period when you suspect the computer may have been used. This will give you a reasonable idea whether or not the computer was used and what they may have been doing. |
Subject:
Re: Computer advanced user know-how
From: keystroke-ga on 03 Aug 2006 09:33 PDT |
Using the above method will not be strictly accurate, as soon as you turn on your pc it writes to files and changes dates on files. Turning it on will probably overwrite the same files as the ones the user would have accessed when bringing the computer out of stand by mode. You best option is to check the Event Viewer START -> Settings (or Control panel) -> control panel if not already done -> Administrative tools -> Event viewer. now try to find the time you think the computer was accessed and search for any "Process was started" or more specifically search in the System Log for any Information type entries under the source "eventlog". Open the event and if it says information close to "The Event log service was stopped." This is when your system went into stand-by. Check the next newer event, if it says something such as "The Event log service was started." and the time this occurred is the same time as you suspect your computer to have been used you know it was turned on and someone tried to use it. Ideally to get all this type of information you should be logging "log on" or "Priviledged Access" attempts within your security logs. --Keystroke-ga |
Subject:
Re: Computer advanced user know-how
From: tomhawk-ga on 23 Aug 2006 16:35 PDT |
perfect answer keystroke... Way to GO |
If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you. |
Search Google Answers for |
Google Home - Answers FAQ - Terms of Service - Privacy Policy |