Good Evening,
I had setup a SME6 box about two years ago in a classroom lab. All the machines at that point were joined up to the domain that it served. Since that time, the units were re-imaged and now the students just access their files by going \\thesvr\userhomefolder and putting in their username and password.
Well, how do I look for logs that would indicate any time / date stamp that would show who, what, when, and possibly how a student could have accessed another students work? Something is going on and the police are asking as criminal charges may result. Any ideas guys?
0 Replies
1961 Views