Tracking access

Q: Is there any way that I can tell if someone else has been using my computer? Preferably without having to install any additional software. I noticed a new item had appeared on my All Programs menu and I’m sure I didn’t put it there.

A: You can track logins from the Windows Event Viewer. Go to Control Panel, select System and Security/ Administrative Tools/ Event Viewer, then filter for event IDs 4264 and 4636. This will give you a list of all logins with their date and time.

If you suspect someone has been using your machine without permission it’s worth changing your password or ensuring that Windows asks for a password – if it doesn’t already – both at start up and after the screen saver has been activated. You can manage your password through User Accounts and Family Safety in Control Panel. To set a screen saver password go to the desktop personalisation screen, select Screen Saver and tick the On Resume, Display Logon Screen box.

Having said that, new items on the All Programs menu can sometimes be added by software updates so you may be worrying unduly.

You can force Windows to ask for a password after the screensaver has been displayed

Originally featured in PCU133