Deciphering Event Viewer Users

By ckizziar ·
A company delivered a replacement laptop today, the second time they've delivered a "new" laptop that is not indeed new. On the previous machine we found the ID cards for an entire division of another states State Police. This time they've wiped the files, but I see over a year of activity in event viewer. Of course since the old users have been deleted all I get in the User field is a long segragated string of numbers and letters (S-1...)

Does anyone know of a way to decipher these back to their original names? I'd like too try and build a bit more evidence before we take this too our Secretary of State's office.


Chris Kizziar

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Share your knowledge

Related Discussions

Related Forums