i think that the best way to do this, is go to the quickfind (in start menu) and search for '*.pwl' . Here you will find users password files (encoded) and then you will need to check the date modification from there.<br>
<br>
I hope this helps.<br>
<br>
Karl.
you were right, i was thinking 95 terms, if you go to explorer, find winnt directory, then system32 and then config, then look for 2 files, security, and sam, these are the logs. i am looking now for a way to view these files. (sharing violation and all that). <br>
If you do not have NTFS installed on your system you could use an MS-DOS, WINDOWS 95 or WINDOWS 98 boot disk, then simply copy both SAM and SECURITY to the disk, remove the disk then boot back to NT, and view them.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.