Link to home
Start Free TrialLog in
Avatar of cjjimbos
cjjimbos

asked on

remote shutdown dos how to trace

Somebody shutdwon my pc through DOS, how can you track that to see who did it?
ASKER CERTIFIED SOLUTION
Avatar of dlb6597
dlb6597

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sirbounty
Bear in mind that it could be the user logged on and then initiated the command under alternate credentials (i.e. the System account).
Thus, you may also want to check the security logs around that time to see who actually logged onto the console...