.
I ran across an awesome little tool recently.
It is called LastActivityView from NirSoft
The program collects information from various sources, and can show you an activity report for a system that includes:
-Folders accessed
-System logon, shutdown, sleep times
-Software installation time
-Crashes
-System restore point creation
When you launch it, it loads almost immediately with the latest info:
You can even export the data to HTML.
It is a nice little utility to add to your flash drive. Can really help when you are trying to get a timeline of who did what.
or
One more thing…Subscribe to my newsletter and get 11 free network administrator tools, plus a 30 page user guide so you can get the most out of them. Click Here to get your free tools
{ 7 comments… read them below or add one }
Great tool. Thanks for the tip Steve
Yeah Thanks Steve, I Like The NirSoft Tools, But Never Really Took Notice Of This One, Very Handy Tool.
Thanks Steve, Excellent!!!
Thanks Steve, Great stuff as usual, I was looking for something like this one.
Thanks Steve great tool
Thanks Steve.How do i view last activity of any computer within the domain?this one seems to view last activity of the local computer only
I think you might be able to do this by pointing it at the domain controller. I could be wrong since it is possible MS uses a different set of events for domain user activity.