troubleshooting Question

user access and recent activity

Avatar of Pau Lo
Pau Lo asked on
Windows XPWindows OSDigital Forensics
8 Comments2 Solutions473 ViewsLast Modified:
I need sort of a top level "what a user did" type report or clues on an XP machine. I.e. the last day the user logged on to their PC, what kind of apps they ran, what kind of files they accessed. Would this be acheivable, and if so on an XP machine what areas we would look too.

I also need to know the last time a user logged on to a specific PC with a specific (domain) username, where could/may I find that? Would it be the last modified date on their entry in documents and settings?

Its nothing criminal so no need to worry about absolute procedures. May have guessed another users password and used it to login, and then who knows what theyd do, look at their email, home drive, network drives etc. Any pointers welcome for a map of activity for that day...

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 2 Answers and 8 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 2 Answers and 8 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros