Determine who changed 7945 background

[s.clinard]

Hi All -

I know this seems like a trivial question, but is there a method for tracking down who changed an IP Phone background and when? I have already checked the TFTP logs using RTMT and browsed TFTP File Management on the server (CUCM 7.1(3)) but do not believe it was done this way.

If this suspect used the Cisco Phone Designer, it is possible my password has been compromised.

Does anyone have any thoughts?

Thanks!

Shane

[paolo bevilacqua]

In theory is it possble to do that connecting to phone another network / TFTP, then user preferences.

If you have doubts about your passwrod, change it.

[s.clinard]

Thanks Paolo -

I determined that my phone was incorrectly set as the primary user device under the mobility configuration in an end user account. I found the user who was making changes by browsing the CCMIP service logs and searching for my phone's MAC address.

Thanks again for the reply.

Shane