Lounge For casual talk about things unrelated to General Motors. In other words, off-topic stuff. And anything else that does not fit Section Description.

Windows security/logs experts?

Thread Tools
 
Old 11-06-2003, 06:01 PM
  #1  
Junior Member
Posts like a Ricer Type-R
Thread Starter
 
willwren's Avatar
 
Join Date: Aug 2002
Posts: 11
Likes: 0
Received 4 Likes on 4 Posts
willwren is on a distinguished road
Default Windows security/logs experts?

Is there any way to tell if someone USED a computer, but no internet on a particular date/time? Closed an application? Deleted files, then deleted them from the recycle bin?

Windows ME
Old 11-06-2003, 06:04 PM
  #2  
Senior Member
Certified GM nut
 
aviator327's Avatar
 
Join Date: Jul 2003
Location: Charlotte, NC ________ SEBF 07 survivor
Posts: 2,128
Likes: 0
Received 0 Likes on 0 Posts
aviator327 is on a distinguished road
Default Re: Windows security/logs experts?

Originally Posted by willwren
Is there any way to tell if someone USED a computer, but no internet on a particular date/time? Closed an application? Deleted files, then deleted them from the recycle bin?

Windows ME
I think there is a way to do it in XP but don't know about ME. Are you trying to recover some deleted files?
Old 11-06-2003, 06:05 PM
  #3  
Junior Member
 
SSEi95's Avatar
 
Join Date: May 2002
Posts: 1
Likes: 0
Received 0 Likes on 0 Posts
SSEi95 is on a distinguished road
Default

To do all that you may need a seperate program not already installed with windows.

If you want to try to piece some stuff together the half-a$$ed way you can check to see hen tmp files were created / last modified and also check the event veiwer logs to see when the pc services were started and stopped. These logs will also tell you who logged in if you have personal accounts on that pc.

Hope this helps some.
Old 11-06-2003, 06:10 PM
  #4  
Senior Member
Certified GM nut
 
aviator327's Avatar
 
Join Date: Jul 2003
Location: Charlotte, NC ________ SEBF 07 survivor
Posts: 2,128
Likes: 0
Received 0 Likes on 0 Posts
aviator327 is on a distinguished road
Default

Originally Posted by SSEi95
To do all that you may need a seperate program not already installed with windows.

If you want to try to piece some stuff together the half-a$$ed way you can check to see hen tmp files were created / last modified and also check the event veiwer logs to see when the pc services were started and stopped. These logs will also tell you who logged in if you have personal accounts on that pc.

Hope this helps some.
I know XP has the event viewer logs but not sure about Win ME.
Old 11-06-2003, 06:11 PM
  #5  
Junior Member
Posts like a Ricer Type-R
Thread Starter
 
willwren's Avatar
 
Join Date: Aug 2002
Posts: 11
Likes: 0
Received 4 Likes on 4 Posts
willwren is on a distinguished road
Default

Can I get confirmation on event viewer with ME?
Old 11-06-2003, 06:13 PM
  #6  
Senior Member
Certified Car Nut
 
BonneMeMN's Avatar
 
Join Date: Jun 2003
Posts: 15,928
Likes: 0
Received 1 Like on 1 Post
BonneMeMN is on a distinguished road
Default

XP pro has A LOT, but i don't know about windows ME. It would be event viewer, but you mighta had to set it up to catch certain things before you wanted. What'* going on, and why you using ME for bill'* sake?
Old 11-06-2003, 06:22 PM
  #7  
Senior Member
Certified GM nut
 
aviator327's Avatar
 
Join Date: Jul 2003
Location: Charlotte, NC ________ SEBF 07 survivor
Posts: 2,128
Likes: 0
Received 0 Likes on 0 Posts
aviator327 is on a distinguished road
Default

Originally Posted by willwren
Can I get confirmation on event viewer with ME?
Bill, I just checked my Win ME Secrets book (about 1500) pages and there is nothing about an event viewer in the index.
Old 11-06-2003, 06:23 PM
  #8  
Junior Member
 
SSEi95's Avatar
 
Join Date: May 2002
Posts: 1
Likes: 0
Received 0 Likes on 0 Posts
SSEi95 is on a distinguished road
Default

Originally Posted by aviator327
Originally Posted by willwren
Can I get confirmation on event viewer with ME?
Bill, I just checked my Win ME Secrets book (about 1500) pages and there is nothing about an event viewer in the index.
Yea, I just did some checking and event viewer only went back as far as NT. Might be stuck with scrounging around for file dates.
Old 11-06-2003, 06:27 PM
  #9  
Senior Member
Certified GM nut
 
aviator327's Avatar
 
Join Date: Jul 2003
Location: Charlotte, NC ________ SEBF 07 survivor
Posts: 2,128
Likes: 0
Received 0 Likes on 0 Posts
aviator327 is on a distinguished road
Default

Thats why I am using XP. I just saw a segment on Call For Help yesterday about a free utility out that will recover deleted files even from the Recycle Bin. It looked pretty interesting.
Old 11-06-2003, 06:34 PM
  #10  
Junior Member
 
SSEi95's Avatar
 
Join Date: May 2002
Posts: 1
Likes: 0
Received 0 Likes on 0 Posts
SSEi95 is on a distinguished road
Default

Originally Posted by aviator327
Thats why I am using XP. I just saw a segment on Call For Help yesterday about a free utility out that will recover deleted files even from the Recycle Bin. It looked pretty interesting.
Yea, but XP has some features I can't stand. At this point I plan on moving my primary pc'* from now on over to unix and mac platforms.

Here is one of the main reasons for this:

http://www.computerworld.com/softwar...,70294,00.html

http://www.informit.com/isapi/produc...t/articlex.asp

http://www.pcmag.com/article2/0,4149,929861,00.asp


Quick Reply: Windows security/logs experts?



All times are GMT -4. The time now is 09:03 PM.