OneRedLT4
Well-known member
I suspect that during the time I was away from my computer, before it went to screen saver and therefore requiring a password to get back in, someone went in and changed the setting so it bypasses the password screen upon boot up.
Can I filter maybe the event view to see when logon credentials or policies had been changed? it would be really easy to get in knowing that you could just power it down and up again to get in (shoulda thought of that).
Can I filter maybe the event view to see when logon credentials or policies had been changed? it would be really easy to get in knowing that you could just power it down and up again to get in (shoulda thought of that).