Help needed in this critical situation!!!!!!

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

I have the XP professional edition OS and joined to my local domain server.
In my System, i have enabled the remote user, at some point of time, some
one used my system, thorugh remote sent an email as if i was there.... i am
not able to track , who used my system at that point of time and even that
system is being connected and logged in as domain user........ I need to
track the person who used my system either from the domain controller
machine or from the my system... how will i do the say ....

Any help will be gretly appreciated..


Regards,
Rizwan
 
You can trace that user by using event logs.. For this, go to Start-->
Run--> (type) mmc--> add/remove snapin --> Event viewer --> (in event
viewer left side pane you can able to see three logs : Application,
Security and system, you have to select security audit -->
(Logon/logoff), here you can find the user name and you can trace his
Machine's IP Address also.

Trace the users ID who were logon on that particular time to your
machine, check your local users and computers to find their account is
exist in your local system if possible reset their account password (If
you are having administrative rights) to block them, otherwise you have
to configure your system to NOT to accept remote connections.

Users can Logon to domain as well as they will use MSTSC tool in
Start-Run: MSTSC to take remote control this is a piece of information
for your reference.

Cheers

Hope this information helps you..
 
Just a shortcut to get to the Event Viewer!
Start -> Run -> Type: eventvwr and then click Ok.

Cheers,
Tim Macaulay, MCSD, MCSD.NET, MCAD, MCP
Microsoft Product Support - ADSI, Visual Studio, MSI
This posting is "AS IS" with no warranties, and confers no rights
 
Back
Top