Solved

Change date on workstation

Posted on 2010-08-17
3
438 Views
Last Modified: 2013-11-13
I need to check and see if an employee has been changing the date on her workstation with XP Pro.  Have been told how to check. Question: can this be done remotely with I go in on her cmputer?  How far does the audit go to see if dates were changed?
0
Comment
Question by:LindaWebb
3 Comments
 
LVL 11

Expert Comment

by:Coast-IT
ID: 33459647
Just stop users from changing time in grou policy or local policy if you dont run a domain ;

Computer Configuration -> Windows -> Security -> User rights assignment -> Change the system time.

By default only power users and administrators can change the system time, but you can lock it down to groups here.
0
 

Author Comment

by:LindaWebb
ID: 33459807
The office where I am supposed to check for embezzlement uses a domain and they did not have it set up where the user could not change the date. Live and Learn!  So I need to see if she changed dates in the past.
0
 
LVL 5

Accepted Solution

by:
ploftin earned 250 total points
ID: 33459887
Look in the security event log on the workstation. Specifically for event ID 4616.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

3 Tips For Quarter Milers: A Sprinter's Understanding of Agile Software Development Two years ago, I wrote a blog entry about Agile software development (http://www.experts-exchange.com/blogs/mwvisa1/B_1770-Agile-Software-Development.html). At th…
Online collaboration can help businesses be more efficient, help employees grow their skills and foster a team environment.
With the power of JIRA, there's an unlimited number of ways you can customize it, use it and benefit from it. With that in mind, there's bound to be things that I wasn't able to cover in this course. With this summary we'll look at some places to go…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question