How can I know if a browser has been used if history has been deleted?

As a parent, I would like to know if my teen son is once again cheating and bypassing parental controls. I’m using Microsoft Family Safety, I wonder if there’re ways to bypass it.

If you delete browsing history on a browser (such as Chrome, Firerox etc) and from the cloud, how can I know he’s been using it? Could I check some cookies or timestamps? Can Event Viewer show when an app has been opened or closed?

I’d appreciate any experiences on this

Windows 10 20H2

antonio3535 said:

...If you delete browsing history on a browser (such as Chrome, Firerox etc) and from the cloud, how can I know he’s been using it? Could I check some cookies or timestamps? Can Event Viewer show when an app has been opened or closed?

By default no, the event viewer does not record this. But you could set up auditing for his access to the any particular file or folder, such as auditing access to the .exe files for Firefox or Chrome. Each access will then be recorded in the event viewer's Security log.

Microsoft said:

You can apply audit policies to individual files and folders on your computer by setting the permission type to record successful access attempts or failed access attempts in the security log.

https://docs.microsoft.com/en-us/win...file-or-folder


Only an administrator can set up or change auditing, a standard user cannot even see what auditing is set up unless they know an administrator account's password.

Paul Black said:

Hello @antonio3535,

How computer literate is he?

I ask because it will help us to determine what is best suited, if any, for answering your question.

Of course, if there is anything that can be done, this would NOT apply if he was to use a Portable Browser.

I hope this helps.

He's 16yo and is an "expert" in downloading crap cracked software and youtubing for how to bypass this and that, no matter my efforts to keep him away from that. He even knows how to basically use event viewer.
I've had him uninstall any vpns.

Thanks a lot for your answer

- - - Updated - - -

Bree said:

By default no, the event viewer does not record this. But you could set up auditing for his access to the any particular file or folder, such as auditing access to the .exe files for Firefox or Chrome. Each access will then be recorded in the event viewer's Security log.

https://docs.microsoft.com/en-us/win...file-or-folder


Only an administrator can set up or change auditing, a standard user cannot even see what auditing is set up unless they know an administrator account's password.

I'll have a look at that, I know how to do some stuff with event viewer. Thank you

- - - Updated - - -