Any way to find out when Outlook was launched?

[Georgia Sam]

A user opened Outlook on his computer (Ofc 2k3 on XP) at some point on Tu,
7/26.

I want to find out what time he actually opened Outlook.

(NOT what time the first email was received on that date.)

So assuming that he opened Outlook (pop3 mode) at some point during the day
and them may not have actually sent or received any messages (although
Outlook polled the Exchange 2k3 server for new messages every 15 minutes.),
is there any sort of log that will tell me when he actually started Outlook
on that day?

I haven't fount anything that's obviously helpful in the event logs. I've
searched for *.log files that were modified since that date, but nothing
jumps out at me.

I DO have access to the Exchange server.

Most everything has default settings.

So how might I prove the exact time that he actually opened Outlook on that
PC?

Thanks!

 

[Marc Kupper]

A user opened Outlook on his computer (Ofc 2k3 on XP)
at some point on Tu,7/26.

I want to find out what time he actually opened Outlook.

Download and run pslist from
http://www.sysinternals.com/Utilities/PsList.html
No installation is needed - just copy the exe to a convenient place.

From a command prompt run

pslist outlook
It'll show the Elapsed Time and from that you can compute exactly when
Outlook was started.

Marc