Question Locked

Deciphering Event Viewer Users

0 helpful
1 reply
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

A company delivered a replacement laptop today, the second time they've delivered a "new" laptop that is not indeed new. On the previous machine we found the ID cards for an entire division of another states State Police. This time they've wiped the files, but I see over a year of activity in event viewer. Of course since the old users have been deleted all I get in the User field is a long segragated string of numbers and letters (S-1...)

Does anyone know of a way to decipher these back to their original names? I'd like too try and build a bit more evidence before we take this too our Secretary of State's office.

Thanks,

Chris Kizziar

1 reply

This discussion is closed to new replies.