Hot answers tagged

11

You don't need to actually destroy the machine; just force it to shut down and lock out the user. Run shutdown /m <machinename> /f /t 0 to force a computer shutdown. Disable the Active Directory user account for the user. Disable the Active Directory user account for the computer. Just make sure to shut down the computer before disabling its ...


4

As I already said several times, if this is a forensics case I strongly advise you against doing anything different than physically going there and picking up the machine; tampering with it in any way is bound to invalidate any legal proof that could come from it. That said, there are several ways to render a machine unbootable while damaging it as little ...


3

Not sure if this question has been answered, but just wanted to do the same thing. I used: rsnapshot-diff -v folder1 folder2 which worked for me. Note that folder1 and folder2 are folders and not snapshot names. In my case, folder1 was /USB/USB_HDD_7/Snapshots/daily.0


3

A few questions: Is there any reason you need to go a destructive route? If yes, go with @frupfrup's answer. Does the user only have a domain logon, or do they have a local login as well? How quick does this need to take effect? Another thing you could do is cause a generic active directory login error. First disable cached logins on that machine, ...


1

The short answer is no. Assuming you're using Outlook with MAPI (using IMAP or some other protocol could only tell you that the message was retrieved by a mail client, most of which sync automatically on a schedule anyway). Even if there were a way to identify when the email had been marked as read (and I doubt that there is, but can't say for sure), it ...



Only top voted, non community-wiki answers of a minimum length are eligible