Hello I would like to know is th

[Adhyapika]

Hello

I would like to know is there is any way to find out in a Computer who logged in and the date and time?. Where do I check? Please suggest. It is a PC with Win 98 SE

Thanks

 

[mattjurado]

No realy good way that I know of, 98 was not designed with any sort of security in mind. You might search for *.pwl, to see when the last time was someone changed their password list, but it doesn't necessarily mean they haven't logged in since. You could also look at c:\windows\cookies, and c:\windows\history to track down web activity. Might help if you told us what you are looking for.

Matt J.

 

[Adhyapika]

I would like to know who logged in my staff Computer and what time. Someone deleted a file and just to find out who logged in last?

Thanks

 

[mattjurado]

You're not going to get that from 98. If its important, you might purchase a file recovery application, and you can restore it, but the more you use your system, the less likely it will be to get it back.

Anyone else have a suggestion?

Matt J.

 

[cdogg]

Matt's right. Before you go installing, deleting, or just plain using the PC too much, you might want to go out and buy an app like Norton Utilities, which comes with an UnErase utility that can read unused sectors of your hard drive. There's a good chance the file is still there if it wasn't deleted that long ago.


~cdogg
[tab]"The secret to creativity is knowing how to hide your sources"
[tab][tab]- A. Einstein

 

[TekTippy4U]

If it's within 5 days..you might be able to "Scanreg /restore"
Restart and hold CTRL while booting and wait for the Win98 Startup menu and choose "Command prompt only"...
type SCANREG /RESTORE
choose a known good "started" version from a previous day..

As far as security...
enable User Profiles so people will have to use a password to log in and deny them access to your specific folders

TT4U

Notification:
These are just "my" thoughts....and should be carefully measured against other opinions....I try very hard to impart correct info at all times.

 

[cdogg]

TT4U,
Correct me if I'm wrong, but won't the "restore" command only restore system files and configurations? I don't think it will restore missing files unless they were crucially part of the OS.


~cdogg
[tab]"The secret to creativity is knowing how to hide your sources"
[tab][tab]- A. Einstein

 

[TekTippy4U]

Cdogg;
Ya know, I can't remember running Scanreg /restore to only retreive a deleted (say a .doc)file....
I know the System.dat and User.dat are the two main restore files...and whether or not it was a system file per se wasn't mentioned, so I thought to give it a shot...
and maybe the owner already has User profiles enabled in which case it's possible to retreive the file, I would think....and if User profiles weren't enabled maybe the file would be located in the HKEY_USERS\.Default Key...I really haven't looked into it that much

TT4U

Notification:
These are just "my" thoughts....and should be carefully measured against other opinions....I try very hard to impart correct info at all times.

 

[cdogg]

Yeah, to be honest I've never really fiddled with Scanreg /restore, so I wouldn't know. Luckily, I've always had an image to fall back on. It's still a nice feature to have though.


~cdogg
[tab]"The secret to creativity is knowing how to hide your sources"
[tab][tab]- A. Einstein