On windows XP there used to be tons of fairly well hidden folders that contained LNK files for office type documents recently opened which could come in handy for forensics and/or basic trouble shooting.. Do you know if theres similar folders on windows 7 enterprise edition?
And also any idea where such folders may exist (if at all) on citrix xenapp/xendesktops server running server 2008? (accessed via WYSE terminals).
The XP ones were:
.\\Documents and Settings\UserName\Recent and
..\\Documents and Settings\UserName\Application Data\Microsoft\Office\Recent
Aside from these folders are there any other useful folders/files that keep a log of recently accessed files (ideally with the path).