We have had an incident here and the HR and Legal team have asked me to track a certian user's recent activity. They suspect a file was printed on a certain date by a certain user. I am able to track all the PCs he has accessed but I'm struggling to find the recent files hes accessed. I searched the 4 XP machines already and they do not fit the time period. I'm donw to 2 Win7 machines that show his login during the time. How do I find what files he's accessed or printed.?