Comments for Can I tell when someone logged into my machine, and what they did?

Comment from Carmen on 2009-06-14

2009-06-15T04:39:42Z

What about using Start>Search>For Files or Folders and searching all files and folders created/opened that day (then sorting chronologically)?

Sure. Assuming that she didn't clean up after herself, that is. Problem is ... you just don't know.

- Leo
15-Jun-2009

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Glenn P. on 2009-06-13

2009-06-13T13:01:23Z

It's going rather far, but if you're really suspicious, you can write a teensy little batchfile that'll write the current date and time to a designated textfile. For example (but mind you, this is just off the top of my head):

@echo off
echo %DATE%%TIME% > C:\[Put-Your-Desired-Path-Here]\xxx.txt
exit

...You save this somewhere inconspicuous with a name ending in *.BAT (for example, "Hello.BAT"), and put a shortcut to that batchfile (make sure it runs minimized!) in your "startup" folder.

Now, anytime anyone logs on, the date and time of the latest login will be stored to that text file. (If you want a running list of logins, put a ">>" before the filename -- that is, use two, instead of just one, "greater-than" -- to signal an "append" as opposed to an "overwrite" operation.)

The downside is that the title of the batchfile itself will be visible, very briefly, in the Windows Taskbar during each login, and if your interloper is suspicious, he can trace your little logon-tracker without too much effort. Naming your batchfile something innocuous should go a long way to allaying such suspicions.

Hope this helps, and good luck! :)

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Mark Jacobs on 2009-06-10

2009-06-10T13:26:09Z

you may get a few more details of what they did if they didn't try to cover their tracks

1, Check recent documents and you may see the names of any files created.
2. Check the browsed cache to see which web sites they visited (the time of the files will make it easy to see if they were downloaded when you weren't using your machine.
3. I use Total Commander (plug for a great utility) but there are lots of other options and can search my computer for any files created between certain times.

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from yalters on 2009-06-09

2009-06-09T21:19:38Z

in XP (when suspicious) I've used command "net user " to check when last log on occurred.
Good Luck and happy learning
YALTERS

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from anon on 2009-06-09

2009-06-09T16:11:44Z

Windows XP does not have the 'login' list.

Additionally, the 'history' may not even list the last 24 hours, depending on YOUR activities.

Security lists only log off/log on when switch uses is activated not a straight turn on computer -> log on.

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.

Comment from Howard on 2009-06-09

2009-06-09T15:19:12Z

Can`t one use a keylogger to tell what was done while one is away from one`s machine?

If so,what is the best keylogger?

]]>

A comment on: Can I tell when someone logged into my machine, and what they did?

Tech Questions? Get Answers! - Ask Leo! ... by Leo Notenboom
Leo's Answers Newsletter - Ask Leo! in your inbox every week.