log for change of date ?

[antoine]

Hello,

the computer's date as set in windows on one of the computers used in
my organisation changed. I'm trying to figure out what exactly
happened, and first thing I'd like to do is to rule out user
interaction.

does anybody know if there's a system log in windows xp pro where I can
check the different moments time / date has been modified (by a user,
or by a program) ?

thanks for your assistance

--Antoine

 

[Pegasus \(MVP\)]

Hello,

the computer's date as set in windows on one of the computers used in
my organisation changed. I'm trying to figure out what exactly
happened, and first thing I'd like to do is to rule out user
interaction.

does anybody know if there's a system log in windows xp pro where I can
check the different moments time / date has been modified (by a user,
or by a program) ?

thanks for your assistance

--Antoine

You can examine the Event Logger. It maintains a coarse record
of various events. If you see a strange jump in date/time then you
might known when it happened.

All of my servers run a heartbeat monitor. It is a simple batch file
that is invoked once every 5 minutes by the Task Scheduler. It
would most certainly show an event like yours.

@echo off
echo %date% %time% >> \\MyServer\SomeShare\%ComputerName%.log