Notifications
Clear all
Topic starter
10/11/2008 8:04 pm
I am looking at the change.log for a restore point. One of the items in the change.log is ntuser.ini, along with all the local settings for two users. The timestamp for the change.log is exactly the same time as the last login time for one of the users from the change.log. The other user whose last login time was mentioned in the restorepoint change.log was off by two minutes.
My question is, when a user rolls back the restorepoint, would that affect the last login date found in the sam file? From the restorepoint contents again it things like \Docs and settings\user\ntuser.ini, \Docs and settings\user\application data, \Docs and settings\user\localsettings etc etc.
Thanks