if you switch on the auditing os system events then this is recorded in the security log in event viewer.
To switch it on type GPEDIT.MSC at the run command
Go to "Local Policies"->"Audit Policy", you need to enable "audit system events" for SUCCESS
Unfortunately the action is not retrospective so it you switch this on now it will record fuure events, but not what has happened prior to enabling the feature.
Main Topics
Browse All Topics





by: anil_uPosted on 2008-09-15 at 02:21:21ID: 22476820
From the command prompt, run the following
om/kb/2322 43
systeminfo | find /i "Up time"
A tool which is cool that has more info is uptime
http://support.microsoft.c