Event Viewer

You can view the actions that have been initiated on your virtual machine by client on the "Event Log" tab.  This will show you what was done, when it was done and by whom it was done.

Eventviewer

Note:  Entries in the "Impersonated By" column will appear only when an authorized Datapipe staff person is assisting you with your system.