Is it possible to checkout the login history on my computer?

[lsquare]

I was gone for a while and my computer does not have a login ID and password. Is there a way to see whether anyone has logged into my computer while I was gone? The OS is Windows XP?

 

[nLinked]

Try Event Viewer > Security section.

 

[xCxStylex]

^ this

in case you may not know, right click on "My Computer" and go to "Manage"

"System tools" "Event Viewer" "Security Log"

 

[lsquare]

Try Event Viewer > Security section.

I don't see anything in the security section. It's just blank. What does that mean then?

 

[Nothinman]

Most likely that no auditing is being done, which is probably the default in XP.

 

[lsquare]

Most likely that no auditing is being done, which is probably the default in XP.

Is there something else that I can do?

 

[VirtualLarry]

Check the timestamps for the internet explorer cache files?

 

[VinDSL]

[...] my computer does not have a login ID and password.

Is there a way to see whether anyone has logged into my computer [...]?

Um...

Is this a trick question?!?!? :sneaky:

 

[lsquare]

Um...

Is this a trick question?!?!? :sneaky:

No it's not. I normally don't use a login id/password for my desktop computer. I was away for a while and I can't help but not think someone was using my computer. I'm trying to find out if my suspicions were right. Is there any other way to find out?

The IE cache won't do me any good if someone just deletes their internet session.

 

[Fayd]

if you're concerned about your porn stash, maybe you should have hidden it with truecrypt?

or simply locked the computer.

 

[lsquare]

if you're concerned about your porn stash, maybe you should have hidden it with truecrypt?

or simply locked the computer.

Are you going to be a troll in this thread? Just sent a warning to the mods.

Hi, mod here.

It's a bit acerbic, but its not trolling (not to mention that porn is a tongue-in-cheek accusation around here). I'd take his advice to heart since he's pointing out the obvious and really is trying to help you for the future: you really should secure your computer.

-ViRGE

 

[ViRGE]

Since XP doesn't have security auditing enabled, you really don't have a lot of choices. If your computer was off, the Event Viewer's system logs should (note: I no longer have an XP box) have recorded some kind of system event when it was turned on even though there's no security auditing.

If your computer was on, then you're searching for a needle in a haystack. Basically your only option is to look for files that have a date modified timestamp from when you were gone.

 

[pcgeek11]

Is there something else that I can do?

Yes there is.

This is the problem: " I was gone for a while and my computer does not have a login ID and password. "

This the the fix: Use a secure password. Of course that will only keep out the casual honest people because if someone has physical access they can get in.