I am on Win XP - SP3..
I logged into my laptop today and found some important files missing from one of the folders. I suspect one of my colleagues have logged into my laptop and deleted them.
I have two user accounts on my laptop
(while the Guest account is disabled).
User Chalfont is password protected where as Administrator isn't. The Administrator user account shows up only when starting in safe mode(It doesn't show up when starting in normal mode - In normal startup mode, all we can see is just the Chalfont user).
I am very sure that they couldn't have logged in via the Chalfont user account as no one know's the password.(I had changed the password the same morning).
How can I find out if anyone else has logged into my laptop using the safe mode option and then logging in with Administrator account. Are there any logs or anything of that sort which shows the user logging activity. If so, what and where are those files located.
If not, can anyone else please suggest any other ideas/hints. Please ask if you need anymore details.
Thanks in advance