Re: Is there any method to detect change in system clock?



I'm fairly sure that the event logs get backed up as part of
the System State backup. You would have to restore the
System State to a different location to find out.


"Mohit" <Mohit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E6F6BE55-2FAD-413D-8219-D1B263DAF958@xxxxxxxxxxxxxxxx

Thank you Pegasus. The Event Logger seems to be the only hope.
In case of the system backup, do you know that at which place does the
system saves such sort of information?
Also, does the system makes backup of event Logs by its own ?

Thanks,
Mohit

"Pegasus (MVP)" wrote:


"Mohit" <Mohit@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A6E26DB5-30E0-4F2D-8A12-697AF3F1E89E@xxxxxxxxxxxxxxxx
Is there any method by which one can detect a change in the system
clock?
May be some place where such sort of log might be maintained and we can
check this log?
The clock was changed 2 months prior to the present date, and then
again
restored back to the present date. This activity needs to be proved in
the
court of law in a certain case.
Your help will be very helpful to get the innocents out of the case.
Thanks.

A further thought: If this is a well-maintained system then
you can retrieve the system logs from your backup medium.





.



Relevant Pages

  • Re: BIOS - COULD THERE A PROBLEM WITH MY PCS BIOS?
    ... Well, what's on the CDs? ... I use the cds to restore data. ... backup disks *can* fail too. ... Logs created by Windows B/up Utility at the time of backing up. ...
    (microsoft.public.windowsxp.basics)
  • Re: External backup/restore - an idea - comments please
    ... can mean that at restore they need to be rolled back. ... those logs if you backed up and restore with ON-Bar. ... ON-Bar whole system backup includes ...
    (comp.databases.informix)
  • Re: Information Store Corrupt - How to restore
    ... are no errors in the logs. ... backup for the IS runs. ... > Start by making an offline backup of the mdbdata folders (both databases ... > restore the information store. ...
    (microsoft.public.exchange2000.information.store)
  • Re: mount database with *.edb and all logs Exchange 2007 urgent :>
    ... i have the backup with the file *.edb and the ... I need restore the mailboxes but i can not restore, ... Yo can not write the exist database, too I utilize the tool exdra ... files with the path of the logs and system but it mantenain the configuratio ...
    (microsoft.public.exchange.admin)
  • Accidently uninstalled Exchange 5.5
    ... If you just restore the older backup (without the logs) ... does the store start?. ...
    (microsoft.public.exchange.admin)

Loading