1

Every few months relatives call me to "diagnose" their home computers and I often notice that there's new applications installed in C:\Program Files. I could tell by its folder's or its data file's Creation Date when it happened, but where can I find out which user account did it or which Administrator account allowed it?

1 Answer 1

1

Scanning though Windows's Event Log should give it away.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .