How to find detailed usage history

Question

How to find detailed usage history

When we opened our iMac this afternoon, there was a Google search open in Firefox which none of us had done. Unfortunately, we checked histories and then went back to that screen, so the history shows two hits but only the time for the second. Is there a more detailed system log available of activity so we can determine when it was done? We're concerned that someone may have accessed it while we were gone, but don't have any way of verifying this without some form of log. (Normally we do not leave the computer with a user logged in, but it's always hypothetically possible that someone forgot to log out before leaving.)

Thanks.

Mac OS X (10.4.11)

Posted on Oct 6, 2008 5:05 PM

Reply

Answer 1

Kappy

Level 10

362,007 points

Oct 6, 2008 7:28 PM in response to richardstoddard

There's no way to know who was on the computer if indeed anyone was. The account was already logged in so the only recorded user would be that account. Anyone using the account is anonymous.

Reply

Answer 2

Oct 6, 2008 8:00 PM in response to Kappy

I understand that if it was already logged in there is no way to know who might have used it. However, we want to find out whether it was used while we were gone. If so, then we'll go to management of the complex and start inquiries.

Reply

Answer 3

Kappy

Level 10

362,007 points

Oct 6, 2008 8:10 PM in response to richardstoddard

Look in your Console log (use Console application in the Utilities folder.) It records certain operating information with date and time stamps. But this does not assure that you would capture someone browsing a website.

If this is a business office environment, then you should instruct all users to log off their computers when they are unattended or to use a screensaver that requires a password to cancel. Leaving a computer logged in and unattended is a potential security risk. Leaving it accessible will not leave any trail of information on who may have used the computer, what they may have done, etc.

Reply