?
Solved

Activity history for windows 7 on a particular day?

Posted on 2012-09-04
1
Medium Priority
?
383 Views
Last Modified: 2012-09-05
A suspicious employee went back to a building and took paper files and probably data from a pc and then changed the password on the pc.

I can crack the pc password but is there a way to see what activity there was? What files were copied to usb sticks for example?

Thanks
0
Comment
Question by:fcek
1 Comment
 
LVL 15

Accepted Solution

by:
cwstad2 earned 2000 total points
ID: 38363268
Hi you will find it difficult to do this unless you have some kind of audit policy in place.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Delta outage: 650 cancelled flights, more than 1200 delayed flights, thousands of frustrated customers, tens of millions of dollars in damages – plus untold reputational damage to one of the world’s most trusted airlines. All due to a catastroph…
Employees depend heavily on their PCs, and new threats like ransomware make it even more critical to protect their important data.
In this Micro Tutorial viewers will learn how to use Windows Server Backup to create full image of their system. Tutorial shows how to install Windows Server Backup Feature on Windows 2012R2 and how to configure scheduled Bare Metal Recovery backup.…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question