I am auditing logons to my computer since I began loosing files. Each day at aproximately 1pm a workstation in another dept. logs on to my computer and sycronizes my document files and looks through files. The workstation is unattended and I believethe culprit may be using VNC to peform the task.How can I trace the culprit to his workstation and provide proof of this act?
