[italy77]

Does OS X keep a history of what applications are opened or what is searched for in spotlight? I ask, because someone at work reset my password and gained access to my computer. I would like to see what applications they opened or what they searched for. Any help is very appreciated!

[CharlesS]

My guess would be that they booted into Single-User Mode or booted from a CD. Either one of these things could be blocked by turning on the Open Firmware Password (or whatever its equivalent is called on the new Intel Macs). Look for a program called "Open Firmware Password", "Firmware Password", or something similar on the OS X install disc.

[italy77]

Originally Posted by CharlesS

My guess would be that they booted into Single-User Mode or booted from a CD. Either one of these things could be blocked by turning on the Open Firmware Password (or whatever its equivalent is called on the new Intel Macs). Look for a program called "Open Firmware Password", "Firmware Password", or something similar on the OS X install disc.

Thanks, I'll do that. But is there anyway to tell what they were looking at?

[TETENAL]

Recent Items in the Apple menu. Recent folders in the Finder Go menu. Sort ~/Library/Preferences by modification date. Look into Console and System logs.