Link to home
Start Free TrialLog in
Avatar of nasheerz
nasheerz

asked on

wipe clues from server

Hi experts, I need your help!!

I have recently switched on my win98 workstation, logged into the w2k server domain and then accessed and copied password protected data that I wasn't supossed to access.

Could w2k server had loged this operations (without 3rd party software)? If the answer is yes, where does it places the log files so I can clean them?




Avatar of Dmitriy
Dmitriy
Flag of United States of America image

You can't.  And yes, the access is logged.  The auditing trail will show who logged on and did what with files.

P.S.  This sounds like hacking.  This site strictly forbids any topics with relevance to illegal activities.
ASKER CERTIFIED SOLUTION
Avatar of TooKoolKris
TooKoolKris

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of TooKoolKris
TooKoolKris

I meant to say that W2K definitely CAN track, sorry for the typo.

TooKoolKris
MCSE+I, CCNA, A+
Avatar of nasheerz

ASKER

I have administrator access to the server, so this has nothing of ilegal. Where are that logs located???
Ask your network administrator then.
Sorry ToolKoolKris but this site is for questions and answers, if you don't know the answer or if you don't want to help me with this trouble, just don't put more impertinent comments to me.

Thanks.



 
This site is for questions and answers that's correct. However it's not for helping you cover your tracks when you accessed files you shouldn't have. Nobody on this site is going to help you in your quest to erase logs so that no one will know that you accessed files you shouldn't have. This question will also be notified to the site operators to see that it is properly deleted as well. Have a good day.

TooKoolKris
MCSE+I, CCNA, A+
You stated that you accessed files you weren't supposed to. Therefore, you were doing something against company policy. It is against the morals of this board to answer any questions regarding covering up tracks, doing something you are not supposed to, or hacking. I don't think you'll get any answers here...
nasheerz,

The answers you've been given are the ones you're going to get; I've force-accepted accordingly.

I've been in Net Admin for a company which does a lot of work with banks and governments. One of my colleagues did exactly what you've done, and had he not gone to our boss and told him (he looked at the CEO's email) he'd have lost his job, even though he has full admin privileges.

The logs exist specifically to see who's doing what. You've done it. I think your course of action is clear. Further, I've alerted EE Admin to this question, and made a notation in your EE profile.

Dmitriy: points for you at https://www.experts-exchange.com/jsp/qShow.jsp?ta=win2k&qid=20303703
jmiller47: points for you at https://www.experts-exchange.com/jsp/qShow.jsp?ta=win2k&qid=20297679

Netminder
CS Moderator