Hi all,

What WOULD you check to see if someone other than you have used your PC?

I suspoect someone other than my family members had logged in my PC, copying couples of files with removeable device and then went away.

Could you tell me how to find the log file in my PC that contains the user login time and which files in my PC have been COPIED?

Thanks

I am using Win XP SP2The log you need is SECURITY audit log in event viewer, but that only helps if it is enabled (not by default). Why do think someone else is using it?If some one has logged on, I know of no way to find out now. However if you wish to set up so you can tell, here is how: Log on as an administrator
Click Start, click Run, type mmc /a (note the space between mmc and /a), and then click OK.
On the File menu, click ADD/Remove Snap-in, and then click Add.
Under Snap-in, click Group Policy, and then click Add.
In Select Group Policy Object, click Local Computer, click Finish, click Close, and then click OK.
At this point, you might want to save this console for further use. Note you can add multiple snap-in and MANAGE multiple computers from this console. I find it rather useful myself.
On the left hand side, navigate to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy
On the right hand side, double-click "Audit Logon Events"
Check the boxes for Success and Failure, click OK
You can close the Microsoft Management Console,