UNC Logging Files

[shanevinnie]

I have an employee who had some files on his computer that were
against company policy, and were offensive to other employees. I
think we know what kind of files they were.

I trust the employee and I feel that he is telling the truth that he
did not place them there. Is there any way to windows logs any body
that UNC'ed to his computer and placed the files there? such as \
\workstation_name\c$

Thanks!

 

[Paul Randall]

If you have the authority to examine this computer, you might download and
run this VBScript. It gives you info for IE browsing similar to IE's
history, but may produce info going back further than normal IE history.
http://lt.dorost.cz/public/scripts/IEspy_src.zip

-Paul Randall