bsharath
asked on
Someone logged me off how can i find who and did what
Hi,
I had Ctrl Alt Del my machine and out of office.Some one restarted my machine and logged in as the Domain Administrator and logged of the system.I want to find what they did after logging in to my machine.
Did they delete any file ,Copy,Move,Editted any files etc.Is there a way to find this.
Regards
Sharath
I had Ctrl Alt Del my machine and out of office.Some one restarted my machine and logged in as the Domain Administrator and logged of the system.I want to find what they did after logging in to my machine.
Did they delete any file ,Copy,Move,Editted any files etc.Is there a way to find this.
Regards
Sharath
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
however for the files, if auditing is enabled and group policy has been enabled for "Audit Object access", then only you can find out what files have changed...
else try to find out the modified files by date/time