Discussion Locked

IE History

0 helpful
12 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Other than looking in IE History and cookies, is there any other place or way I can check an employee's surfing? He was savy enought to clear his history and cookies.

12 replies

by joseph moore

Something else to look for is INDEX.DAT.
This is the history folder for Cookies and for Internet files.
Do a search for this file, and open up every one under the user profile for the employee.
You can open it in Notepad.
You will see a bunch ofstuff at the top of it, but just go down lower, and you will start to get URLs and domain names.

hope this helps

by mwn

I found all of them, but apparently he is savy enough to clean these out.

by thechas

Some of the typed url's are also storred in the registry.

You may also be able to use a file recovery utility to reconstruct the cookie and history files that were deleted.

Chas

by mwn

Searched entire registry for "www.", but did not find any unacceptable sites. Might have been cleared when he cleared history and cookies.

by bcboc

I am not sure who has the software for this; but it is possible to recover data on a floppy or a hard drive by doing a low level read in binary and having the program convert it into text.

I believe file names are also stored in the hard drive's table (FAT?).

You could place a batch file in the person's startup directory that will copy the folder(s) onto another PC at a scheduled time or you could have the batch file to notify you when the person is logged onto the system and then you map to the his PC's drive and folders and see what is going on.

It is also possible to buy software that will enable you to see what the person is typing or doing on his PCs.

Anything is possible.

Best thing to do is set tasks/goals/schedules and ensure they get done at a certain time. Wasting time and money on someone surfing may not be worth your time which is probably more important.

This discussion is closed to new replies.