Date Change

[PuG106]

Quick one for you guys hopefully you can guide me in the right direction.

Basically i need to know if i can find out when one of our customers has changed the date on their pc running XP to a date in the future.

Ive checked the event logs etc but cant seem to find anything is there anything else i can check

Cheers

 

[SourChipmunk]

Can't really help with XP, but this is what you would see in Win7. It might be similar.

System Event Log:

Log Name: System
Source: Microsoft-Windows-Kernel-General
Date: 11/6/2011 1:00:00 AM
Event ID: 1
Task Category: None
Level: Information
Keywords: Time
User: SYSTEM
Computer: xxxxxxxxxxxxx
Description:
The system time has changed to ‎2011‎-‎11‎-‎06T06:00:00.000500000Z from ‎2011‎-‎11‎-‎06T06:00:00.000500000Z.