Event Log??? 1

[ComputerSlayer]

Is it possible, within XP Pro, to find out exactly who logged in to my computer and what files, programs or documents were opened. I have a suspition someone is using my work computer while i'm away for lunch. Its on a network. I have looked at the event log but it don't really tell me any think.
I'm half way through my A+ exam and lacking in a little tech knowledge on this one.

 

[NoobX]

I use event viewer then click on system and it shows everything that has happened? Do you have a network admin?

 

[bcastner]

Yes, but perhaps not to all the detail you specified without a third-party utility:

http://www.microsoft.com/resources/...Windows/XP/all/reskit/en-us/prdd_sec_xutj.asp

Have you thought about use Windows key + L to password lock your computer while gone? As there are some possible quirks, see:

http://support.microsoft.com/?kbid=294317

 

[linney]

If you enable Security logging in the Event Viewer (there are several options to be configured for auditing) it should tell you what user is logged onto your machine. That wont help you much if someone else is using your username and password, is that possible?

Click Start, click Control Panel, click Performance and Maintenance, and then click Administrative Tools.
Double-click Local Security Policy.
In the left pane, double-click Local Policies to expand it.
In the left pane, click Audit Policy to display the individual policy settings in the right pane.

 

[ComputerSlayer]

Hi All,

Thanks for the quick response. I think i'll add this site to my favorites.
Yes there is a net work admin guy but i don't really won't to involve him yet. It is the data base manager who i am concerned about and who as been inside my computer. He does have access to all the computers at work but he always goes in mine when l am away. i have sensitive material on my machine. I need to know what programs he ran on my computer while l was away.
Thanks again

 

[bcastner]

Some, not all, applications make en entry in IE's History folder. Microsoft Office applications will most certainly do so.

Set the Start menu to show the most recently used documents. Right-click Start button, Customize, Advanced tab, and check the box at the bottom.

 

[NoobX]

also specifig documents and files show up in start, documents history!

 

[linney]

Perhaps as "Bcastner" suggested you need some third party software.

http://statwin.com/

 

[JFBouchard]

Hi, a third party as suggested by bcastner is definitely the solution to increase the level of detail that's recorded by event viewer. If your "friend" is doing something suspect, you'll have proofs not only doubts.

Jeff