Re: Computers should log accesses, this would be a big security boost

From: Ron Ruble (raffles2@att.net)
Date: 02/08/03


From: "Ron Ruble" <raffles2@att.net>
Date: Sat, 8 Feb 2003 13:07:12 -0500


"Marvin Cohen" <cohenmarvin@hotmail.com> wrote in message news:a9b23639.0302080745.407bb7f3@posting.google.com...
> I have a Windows 2000 PC in my office protected with a password.
> Recently various events happened that had me worried that someone had
> found out my password, and accessed my computer, and downloaded
> sensitive files.
> But I had no way of knowing whether this had happened.
> There should be a way of telling whether someone started the computer
> at night, and copied files from it. Or, if I forget to turn off the
> computer at night, there should be a way of logging activity, and this
> method should not be fooled by a user changing the system date and
> time.

Read the Windows help on "event log".

You can configure an enormous degree of logging
in addition to the default, which still would have logged
the time of the computer starting up, the time someone
logged in and the user id used, and the time they
logged out and shut down.

Logging file activity is simple; check the event log
help under "audit events".



Relevant Pages

  • Re: Computers should log accesses, this would be a big security boost
    ... >> I have a Windows 2000 PC in my office protected with a password. ... >> computer at night, there should be a way of logging activity, and this ... > Read the Windows help on "event log". ...
    (comp.security.misc)
  • Re: Writing Windows Event Log from Visual C
    ... Maybe you can use the Enterprise Library for this kind of logging. ... This supports logging to different Listeners including the Windows ... Event Log. ...
    (microsoft.public.vstudio.development)
  • "Windows Explorer has encountered a problem and needs to close"
    ... At start-up, Windows appears to load normally; ... This Event log is also pasted below. ... Microsoft Product Support Services to report this error. ... 72772476 KB available on disk. ...
    (microsoft.public.windowsxp.basics)
  • Re: Install / Reinstall / Recovery Console causes shut down
    ... View and Manage Event Logs in Event Viewer in Windows XP ... the problem only occurs when the windows file structure is being ... nothing in the event log.. ... start the install process.. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Cannot Open Control Panel
    ... I'm running Windows XP SP1 Home Edition. ... This Event log is also pasted below. ... Event Type: Error ... 72772476 KB available on disk. ...
    (microsoft.public.windowsxp.help_and_support)