Who stole the network switch? How to determine what time the network went down from a log?

  gabbag24 06:14 14 Apr 15
Locked

We have a Windows server 2008 network in our office. Someone stole one of the switches but I can't be sure of the exact time. Where the switch is there's no CCTV camera, but there is a camera that shows the entry into the room where the switch is. Is there any way of looking at a log in any of the 2 computers that became disconnected from the network as a result of the theft to determine what time the disconnection took place? If I know this time I can correlate this information with CCTV data to see who did it. The disconnected computers were running Windows 7 and one was a Windows XP machine.

  lotvic 11:53 15 Apr 15

Maybe possible by looking in Event Viewer ClickHere Might be logged in Event Viewer. I think the path is: Event Viewer, Applications and Services Logs, Microsoft, Windows, Diagnostics-Networking. The Event ID is 6100 I think for disconnections.

This thread is now locked and can not be replied to.

Surface Pro (2017) vs Surface Pro 4

20 groundbreaking 3D animation techniques

How to mine Bitcoin on Mac