Screen Sharing Logs - How to find someone who ran VNC

Hi All,
Currently through the secure.log i can tell if a user has attempted to use Screensharing (VNC) to another mac with the IP. However, i was enquiering if via any logs i am able to see if anyone has launched or attempted to screenshare into a computer? We have has issues where the user has been taken, we have the IP but we need to prove that they ran the application.
So in Short.
- I can find though logs that X remoted into Y thorough Y logs
- I want to (If possible) find through the logs that X remoted into Y thought X logs, or Y was remoted by X through X logs
Any help is apprecitaed
Regards,
Tim

Hi Tim,
I can't answer your question but could you briefly describe how I can find thru the logs that X remoted into Y thru Y logs....
how do i access secure.log.
Thanks,
Noob

Similar Messages

  • System log - how to find out who has deleted the req from cube.

    ^hello friends
    how can i find out who has deleted the request from cube ?
    i wanted to check the system log , that who has deleted the request from cube .
    could you please let me know how to check the same ?
    regards
    manoj

    Hi,
    Did you try the method I had suggested. It will work.
    Also its better to try the path I had suggested as it will display the logs for that particular Cube only.
    But if go through SM37 > B_DEL* it will display all the logs for all the deletion jobs not just this cube and it will be difficult to find out.
    Try that and you should get the log.
    Thanks,
    JituK

  • How to find users who are running IE with different credentials ?

    How to find users who are running IE with different credentials ? 
    Is there any tool or a solution in the market will help or a i can use GPO or even Power Shell ?
    thnx & Regards ,,

    Hi Salman,
    Based on your description, we can use Windows Credential Manager to check this. Windows Credential Manager stores credentials, such as user names and passwords  that we use to log on to websites or other computers on a network.
    Regarding Credential Manager, the following article can be referred to for more information.
    Credential Manager
    http://windows.microsoft.com/en-in/windows7/what-is-credential-manager
    Manage passwords in Internet Explorer using Credential Manager
    http://www.thewindowsclub.com/manage-passwords-internet-explorer-10
    Please Note: Since the above website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Best regards,
    Frank Shen

  • CRM Release confirmation for billing (how to find out who released)

    Hi All,
    Does anybody know how to find out who released a confirmation for billing. Tx for releasing is /BEA/CRMB02. After releasing the confirmation for billing it will show up in /BEA/CRMB01. But there is no way to find out who released the confirmation since there is no change log. Or is there a change log?
    Does anyone know the answer?

    You will need to use 'grep' from the CLI of your appliance(s) in order to view the mail_logs and gui_logs.  Use "released" in the mail_logs to get the timeframe of when the mails in question were released.  (You may need to verifiy the MID for the mails in order to verify the particular ones in question.)  
    Enter the regular expression to grep.
    []> released
    Then use 'grep' again to search the timeframe in gui_logs.  This should display who carried out the action, or what userID they were logged in with --- showing "user:<userID>" in the log line.
    I hope this helps!
    -Robert
    (*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

  • How to find user who loaded the procs in DB

    Hi guys how to find user who loaded procs in database ..and the date...
    is there anyway..
    i tried to look at all_objects..but it didnot workout..
    thanks

    That is correct. You will only have audit rows for item that you are auditing. I am suggesting you audit all DDL in a production database since production jobs should not perform DDL with the probable exception of truncate. This will provide this type of information going forward. It will not help you answer the question of who created the procedure last week?
    Auditing is explained in the Security manual and the full comand syntax is available in the SQL manual.
    You can easily write a purge the audit data to remove data once it is no longer of interest based on the date the audit row was created.
    HTH -- Mark D Powell --

  • How to find out who's texting you from an iCloud email address?

    how to find out who's texting you from an icloud email address?

    OK after a bit of research I found a way to achieve this.
    I simply looked up the email address in ADUC, then did a search in SP with the display name. I could locate the list and manually confirm it was configured with the incoming email address I was looking for.
    I also found the below script on Stackoverflow, but got "The 'using' keyword is not supported in this version of the language." when I tried to run it. Any idea how to fix that? I'd like to have a script to link a library to an email address istead of the
    manual approach described above.
    http://stackoverflow.com/questions/4974110/sharepoint-how-do-i-find-a-mail-enabled-list-if-i-only-have-the-email
    $SiteCollection = ""
    $EmailAddress = "" # only the part before the @
    # Load SharePoint module if not done yet
    if((Get-PSSnapin | Where {$_.Name -eq "Microsoft.SharePoint.PowerShell"}) -eq $null) {Add-PSSnapin Microsoft.SharePoint.PowerShell;}
    cls
    using System;
    using Microsoft.SharePoint;
    namespace FindListByEmail
    class Program
    {a
    static void Main(string[] args)
    string siteUrl = $SiteCollection;
    string email = $EmailAddress;
    using (SPSite site = new SPSite(siteUrl))
    foreach (SPWeb web in site.AllWebs)
    try
    foreach (SPList list in web.Lists)
    if (list.CanReceiveEmail)
    if (list.EmailAlias != null && list.EmailAlias.Equals(email, StringComparison.InvariantCultureIgnoreCase))
    Console.WriteLine("The email belongs to list {0} in web {1}", list.Title, web.Url);
    Console.ReadLine();
    return;
    finally
    if (web != null)
    web.Dispose();

  • How to find out who has released the purchase order?

    Hi All,
    I have a PR number lets say 10231322 and somebody has release it. Could any one please tell me how to find out who has release it?
    Waiting for your kind replies......
    Thanks in advance.
    Regards,
    Faisal

    Hi,
    When you are in tr ME23N, use the menu: environment > header changes.
    Rgds,
    Suzy

  • How to find out who has deleted the production Query

    Hi All,
    I have searche SD , i can find it for infoobject deletion but i couldn't find it for Query.
    Please let me know is there any possiblity to kow
        How to find out who has deleted the production Query
    Awaiting for your replies.
    cheers

    Hi Mahesh and all,
    Thanks for all your  inputs.
    I have tried with RSRREPDIR tabel , I am unable to see that query at all.
    If I use theT-code SLG1,
      please guide me on the steps with paramets to be given in the respective ..object, subobject etc..
    OR
    could you please suggest any other way.
    cheers
    leena

  • How to find out who had deleted the function moldule? S O S

    how to find out who had deleted the function moldule Thank you very much.

    if this fm was assigned to device class (package) you'll find it in
    tables tadir, e070, e071
    try with name of function module or function group
    hope that helps
    Andreas

  • How to find out who is using the shared library?

    Is there a way to find out who is listening to my music on my shared library and what they are listening to?

    After googling a lot I managed to run my application with libumem, generated a core file and succeeded to find some leak with mdb even if ::findleak reported nothing.
    Does anyone knows if the ::findleak (you need libumem and mdb) is supposed to find leak in the native part of the memory and a Java application using the JNI interface?
    Regards,
    Stéphan

  • How to find out who deleted the central person ID of a pernr.

    Hi,
    I have a pernr 100 whose central person ID is deleted. I would like to know how can i find out who deleted it. Which table gives this information.
    Thanks & Regards,
    Soumya.

    It is stored as a relationship in HRP1001 & unless you have table logging turned on for this db table, I don't think you will be able to find out who deleted the Central Person. You can try running the Report RHCDOC_DISPLAY .
    ~Suresh

  • How to find out who provocates locking of SAP account?

    Hi,
    we have the problem that someone obviously tries to annoy one of our SAP users
    by provocating the locking of the SAP users account due to too many attempts to
    log on with the wrong and unknown password. That's pretty aggravating for us so
    that we are looking for a possibility to find out WHO (IP-address?) is
    bantering the SAP user! Is it possible to find that out? Syslog (SM21) doesn't
    show anything!
    Thank you,
    Rainer

    Hello Rainer,
    Please find the below link which will be help of some use:
    Locked user information
    Rgds,
    Gadde

  • How to find out who imported last support packs

    Hello
    I wander who imported last support packs on the system ILS (SAPKB70014 and SAPKA70014). How to find that out. The transport directory is common for many systems

    One possibility is to check the SLOG*. They can be found in TRANSDIR/log. There will be an SLOGYYWW.SID, where YY is the year (example 09) and WW is the week number (example week 10 of the year). Check the date and time, when the package was imported and then look it up in the SLOG. You will get lines like these:
    START imp all              SID        20090204132535              USER     myhost 20090204132535
    And USER is the one you are looking for...
    Best regards, Michael

  • How to find out who has release the purchase requisition?

    Hi,
    I have a Purchase Requisition Number with me and I want to know who has released it. Can any body please help me how to find this?
    Waiting for your valuable responses! Thanks in advance.
    Regards
    Faisal

    Hi,
    Thanks for your response. However, is there not any tcode by which we can find it out?
    By the way I have done the following to find it. Kindly confirm if I have done it correctly:
    1. Executed tcode me23n
    2. Menu Purchase Requisition->Other requisition
    3. Specified the PR number.
    4.Menu Environment -> Item Changes
    5. Here in this screen, I got some information saying :
           Person responsible (user id), Date, Time, Transaction, Change Doc etc..
    Here it says that, one user executed tcode me54 and release indicator is changed to 3.
    I think this is only the user who has released it.
    Anyway, kindly confirm the same.
    Regards,
    Faisal

  • How to find out who deleted a Bank Number

    Hi Guru,
    How can I find out who deleted a bank number for a particular country. Thanks!
    Regards,
    Ajit

    Hi,
    Go to SCU3 transaction, enter the relevant object and you will see the logs.
    Regards,
    Eli

Maybe you are looking for

  • Function-based indexes

    Oracle documentation on "How Function-Based Indexes Work" states that for the creation of a function-based index in the user's own schema, the user must be granted the QUERY REWRITE system privileges. And MUST have the following initialization parame

  • Students splitting a Copy of Final Cut Pro

    Hello, I am a film student, and was wondering the legal bits about splitting a used copy of final cut studio. As I am a student (student = little money) it is one of the only ways to get my hands on a copy for my self. Thanks, Joel Titanium Powerbook

  • IPhoto Crash - Please Help

    Hi - My mac went on the fritz a month ago. I had to re-install everything, including ILife 4. When I open IPhoto it starts to show my pictures, then it immediately closes. The message I get is 'The application IPhoto' has unexpectedly quit. The stack

  • Itunes credit

    I recently received, by ordinary mail, a $50 iTunes gift card that a Japanese colleague purchased while in Los Angeles. I live in Canada and when I attempted to redeem the card the code was refused saying it was only valid in the US store. The US sto

  • How to view a complex text in a table row in jsp?

    hi. I've got an array of type Option (I'm using it in DropDown list) called states and index of that array that I want to output in jsp... This is how the whole line looks like: <ui:staticText binding="#{comp.staticText4}" id="staticText4" text="#{Ap