can windows xp log when u deleted a file or a user?

[AzNCrAzYcOoLeR]

I had a customer come up to me blaming me that i deleted all her files and entries but i know for a fact i didint. Is there a way i can trace back dates of what deleted or what was added?

[temporalillusion]

For "what was added", if you right click on an existing file and choose properties, there is a Created, Modified, and Accessed date stamp that will tell you when the file was last created, modified, and accessed.

There's also information in the Event logs (right click on my computer, choose manage, expaned Event Viewer, and look in the logs) that may be of some use.

As for when a file was deleted, I can't really think of a way to get that information. If nothing else has been written to the hard drive you can probably still unerase the file, but I don't know if Windows updates the modified or accessed date and time of the file before it deletes it.

But even proving to her you didn't do it isn't going to make her a happy customer; try helping her recover the deleted files?