Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

logs of computer

Posted on 2015-01-11
8
Medium Priority
?
92 Views
Last Modified: 2015-01-27
if we change so many settings change for one computer , can we get an history or log file , showing all changes done

like change internet setting , registry........by log file mentioning time and change

any tool
0
Comment
Question by:techp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +1
8 Comments
 
LVL 80

Expert Comment

by:arnold
ID: 40543740
Is this in an AD or standalone/home system.

Auditing GPO in ad, local security policy.
0
 
LVL 56

Expert Comment

by:McKnife
ID: 40543785
No, this is not possible. Auditing will not record what changes have been made, at least not in detail.
So you will have to manage your settings centrally (by GPOs) and do the documentation inside those GPOs (there are many text fields where you can insert details on why and how).
0
 

Author Comment

by:techp
ID: 40543862
it is in AD , as standalone computer
 some tools are to drag all reports from computer , all history ......
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 56

Expert Comment

by:McKnife
ID: 40543866
techp, it is expected that an asker gives feedback. If he doesn't, the thread comes to a halt.
0
 
LVL 80

Expert Comment

by:arnold
ID: 40544426
Auditing will record an event that a change occurred it will not record what the change was.
I.e change in GPO x made by user y.

The event will be in a security eventlog which will either using event forwarding can be aggregated on a central windows 2008 or newer server, or if snmp is installed using evntcmd you could configure eventlog to snmptrap ........
0
 

Author Comment

by:techp
ID: 40544600
there may be some tools to grab all history of computer , ( what installed at what time) ,,,,,,,thats what i am looking for
0
 
LVL 80

Assisted Solution

by:arnold
arnold earned 450 total points
ID: 40544621
trying to cover each item in your request will take a,long time.
There are three main logs application, security, system

Build a VM. Virtualbox or vmware esx aerver both can be obtained for free from their respective sites.

Add the VM to the domain with a detailed auditing GPO, or configure the local group policy to audit

Then install an application and note the application event record.
Let windows update install and see the event in the system/application logs.
Modify the local policy, and you should see under security/application the audit event.
0
 
LVL 23

Accepted Solution

by:
Danny Child earned 1050 total points
ID: 40547769
There are various registry comparison programs, and also ones that track installations.
https://www.raymond.cc/blog/tracking-registry-and-files-changes-when-installing-software-in-windows/
and
https://www.raymond.cc/blog/monitor-software-installs-remove-leftovers-install-monitor/

but I don't think any of them will tell you what TIME the change occurred at.

What problem are you trying to solve?  Monitor unapproved software installs?  Track build images?  Build system logs?
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
While working, an annoying popup showing below will come and we cannot cancel or close it form the screen. The error message will come again and again.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question