Solved

Determine when a new connection was added to a Windows 7 box

Posted on 2013-11-21
5
167 Views
Last Modified: 2013-12-02
Hi,

Is there a way to find out when a new connection (in this case a VPN) was added to a Win 7 box?

In an apparent attempt to circumvent firewall/website restrictions, someone added a connection on a Win 7 kiosk box (shared login credentials) to a website that provides VPN access.  I'd like to find out when the connection was added.  The connection's properties don't show it.

Is there a way?

Thanks,

Paul
0
Comment
Question by:paulc2000
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 28

Expert Comment

by:asavener
ID: 39669389
You might be able to determine when the registry keys were added.  

I think there's a free tool called Registry Manager Lite from Resplendence that will do this.  There are probably other tools available as well.
0
 
LVL 44

Expert Comment

by:Darr247
ID: 39670593
Click the 'start' orb, type in eventvwr.msc and hit Enter.

Expand Applications and Services Logs and see if there's a log for the network adapter. It should tell when a network is added and connected to.Event Viewer - Applications and Services Logs (click for larger)
0
 

Author Comment

by:paulc2000
ID: 39680906
Thanks for your replies.

@asavener: I don't know which keys are generated when a new connection is set up, so I don't know what to look for.  This might be months old so there probably have been thousands of registry changes in that time.

@Darr247: I opened Event Viewer but that PC doesn't show anything for the network adapter, please see attached screen snippet.

Thanks,

Paul.
eventvwr.PNG
0
 
LVL 28

Accepted Solution

by:
asavener earned 500 total points
ID: 39681042
Find the network adapter associated with the VPN adapter, select properties, select Conifgure the network adapter, select Driver tab, select Driver Details.  Write down the name of the driver file.

Then open registry editor, search the \\HKLM\System\CurrentControlSet\services tree for that file.  There's the virtual adapter for that VPN software.  Then use the software referenced above to find when the key was created.
0
 

Author Closing Comment

by:paulc2000
ID: 39689481
Unfortunately, it's going to be a while before I can try your suggestion.  In the meantime, I'll close this question.  Many thanks for your help.

Paul
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Configuring Remote Assistance for use with SCCM
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
In this video, viewers will be given step by step instructions on adjusting mouse, pointer and cursor visibility in Microsoft Windows 10. The video seeks to educate those who are struggling with the new Windows 10 Graphical User Interface. Change Cu…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question