Is there any way to see if anyone has accessed myu computer under Win XP?

[DuffmanOhYeah]

Well, I just moved into a new house. Of course, I just jumped onto the new network, and was sharing some rather sensitive files. Is there any way to see if someone has viewed those files over the network? ie. is there any type of logging feature that goes on that I could check? Any ideas would be appreciated.

 

[Cheetah8799]

I don't have a XP machine in front of me right now to verify this, but try looking in Control Panel -> Administrative Tools -> Event Viewer. There may be a security log that records this stuff.

 

[DuffmanOhYeah]

Hmm, I do see the security log there. THough I have to say that I am having a bit of difficulty understanding or interpreting these logs. Can anyone offer some help? WOuld it be helpful if I posted a screenshot of the logs?

 

[pieholden]

Unless you set up auditing, there won't be much in your security log that will tell you someone has infiltrated your PC. Auditing is off by default but if you do a Google and follow some simple steps, you can have it up and running in no time.

 

[DuffmanOhYeah]

It would seem that auditing was running? WHen I check out the "security" events, I can sort events by their category. The ones I am looking at are "Account Logon" and "Logon/Logoff". FOr account logon, there only seem to be 4 entries since I arrived on this new network that were not from my maching. The logon/logoff is substantially harder to tell. Under user, there are a number of "ananymous logon"s, and a fair number of "network service"'s SHould I be concerned with these even though they do not have a corrlotaing "account logon"? And would there be any extra information I can glean from these events?

 

[VirtualLarry]

If you had file-sharing enabled, and also have the Guest account enabled, or otherwise allow anonymous file-sharing access, then those "anonymous logins" could well have been other people connecting to your computer.

(N.B. I'm not sure if someone attempting to connect to file shares using the "Guest" account, will show up as anon in the logs or as Guest.)