Do you have a built in error log, i.e containing date time, who was logged on, error number, line number, module?
If so, I think you have your answer. If not, it may be tough. -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Jarvis, Matthew Sent: Friday, November 04, 2011 12:58 PM To: [email protected] Subject: [NF] forensics - when was printer deleted? Helping someone else out here.... Trying to determine when a printer was deleted from a machine. Do the system logs track that sort of thing? If not, was thinking I could look for errors related to printing and try to infere when it happened... Thanks, Matthew Jarvis || Business Systems Analyst IT Department McKenzie-Willamette Medical Center 1460 G Street, Springfield, OR 97477 || Ph: 541-744-6092 || Fax: 541-744-6145 <snip> _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://leafe.com/mailman/listinfo/profox OT-free version of this list: http://leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/004301cc9b35$64137330$2c3a5990$@com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.

