We are trying to determine which one of 20-30 computers were used by a previous employee. We know that the computer at one point had two user accounts, but one of them was deleted around 6 months ago. The computer in question is the only computer that had a deleted account the last year. Very few of the other computers have had deleted accounts, so it's not a crisis if all deleted user accounts are found, not only the one deleted this year.
Both user accounts had Admin rights. There are no system restore points dating that far back.
The purpose of this is to use some third party tool to recover some lost data from that account. We don't want to try this on all computers, as it might be time consuming, and potentially a risky process. We know the password of the account.
Is there a way to, without installing any software, determining if a user account has been deleted (and if possible the name of said account)?
I'd like to recover excel-files, small .txt-files (a few kB), files used by a specific simulation tool etc. Anything stored in
My Documents, and/or the folder
I've tried searching through the server (where project specific files should be stored) for files owned by that user, but no files were found. This was very strange, but it's possible, since the employee was only employed for a short time.