I am a network administrator that works with fellow admins. I was accused of logging into my fellow workers computer when I in fact never did. I did create the master image and my profile is on all the computers with the same creation date. Is there a way to prove that I never logged in to their computer? I know if you search for a id4624 it shows the login accounts and dates. I did not have auditing enabled. The only 4624 event that show are when the image was created. I appreciate any help. This is a windows 2008 server network with windows 7 clients.
