A computer system malfunctions when there is some change in the system and the computer did not accept the change. It is possible that the user makes these changes. Hence it is important to identify the changes made by the user to determine the cause of the problem.
Apart from asking probing question to determine recent changes done by the user, system logs can also be used to identify any recent changes to the system. Tools like event viewer can be effectively utilized to determine any event that was caused due to user changes.
