Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

application or system event logs showing lauch of apps

Do any of the application or system event logs on XP show what applications a user ran? I.e. if for a given day a user opened MS-word 5 times, would they be in any of the default evt files, or anywhere else?
Avatar of akhalighi
akhalighi
Flag of Canada image

No .. there is  nothing like that .
ASKER CERTIFIED SOLUTION
Avatar of akhalighi
akhalighi
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Control Panel > Administrative Tools > Local security Policy > Local Policy > Audit Policy > Audit Process Tracking.
Avatar of Pau Lo
Pau Lo

ASKER

Cheers so by default unless that isn't on no luck. The prefetch folder looks interesting mind....
you can set audit based on SUCCESS or FAILURE ; for example if a user opens note pad application successfully , you will see a security event log about it that tells you a particular user name has started a process : c:\windows\system32\notepad.exe