Avatar of Pau Lo
Pau Lo
 asked on

application or system event logs showing lauch of apps

Do any of the application or system event logs on XP show what applications a user ran? I.e. if for a given day a user opened MS-word 5 times, would they be in any of the default evt files, or anywhere else?
Windows XPWindows OSMicrosoft Office

Avatar of undefined
Last Comment
akhalighi

8/22/2022 - Mon
akhalighi

No .. there is  nothing like that .
ASKER CERTIFIED SOLUTION
akhalighi

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
akhalighi

Control Panel > Administrative Tools > Local security Policy > Local Policy > Audit Policy > Audit Process Tracking.
Pau Lo

ASKER
Cheers so by default unless that isn't on no luck. The prefetch folder looks interesting mind....
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
akhalighi

you can set audit based on SUCCESS or FAILURE ; for example if a user opens note pad application successfully , you will see a security event log about it that tells you a particular user name has started a process : c:\windows\system32\notepad.exe