Solved

Determine when a new connection was added to a Windows 7 box

Posted on 2013-11-21
5
161 Views
Last Modified: 2013-12-02
Hi,

Is there a way to find out when a new connection (in this case a VPN) was added to a Win 7 box?

In an apparent attempt to circumvent firewall/website restrictions, someone added a connection on a Win 7 kiosk box (shared login credentials) to a website that provides VPN access.  I'd like to find out when the connection was added.  The connection's properties don't show it.

Is there a way?

Thanks,

Paul
0
Comment
Question by:paulc2000
  • 2
  • 2
5 Comments
 
LVL 28

Expert Comment

by:asavener
Comment Utility
You might be able to determine when the registry keys were added.  

I think there's a free tool called Registry Manager Lite from Resplendence that will do this.  There are probably other tools available as well.
0
 
LVL 44

Expert Comment

by:Darr247
Comment Utility
Click the 'start' orb, type in eventvwr.msc and hit Enter.

Expand Applications and Services Logs and see if there's a log for the network adapter. It should tell when a network is added and connected to.Event Viewer - Applications and Services Logs (click for larger)
0
 

Author Comment

by:paulc2000
Comment Utility
Thanks for your replies.

@asavener: I don't know which keys are generated when a new connection is set up, so I don't know what to look for.  This might be months old so there probably have been thousands of registry changes in that time.

@Darr247: I opened Event Viewer but that PC doesn't show anything for the network adapter, please see attached screen snippet.

Thanks,

Paul.
eventvwr.PNG
0
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
Comment Utility
Find the network adapter associated with the VPN adapter, select properties, select Conifgure the network adapter, select Driver tab, select Driver Details.  Write down the name of the driver file.

Then open registry editor, search the \\HKLM\System\CurrentControlSet\services tree for that file.  There's the virtual adapter for that VPN software.  Then use the software referenced above to find when the key was created.
0
 

Author Closing Comment

by:paulc2000
Comment Utility
Unfortunately, it's going to be a while before I can try your suggestion.  In the meantime, I'll close this question.  Many thanks for your help.

Paul
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now