How To View Computer History Windows 10

At that place are times when a user wants to know the startup and shutdown history of a computer. More often than not, system administrators demand to know well-nigh the history for troubleshooting purposes. If multiple people apply the figurer, it may exist a good security measure to check PC startup and shutdown times to make certain the PC is beingness used legitimately. In this commodity nosotros discuss two means to go along track of your PC shutdown and startup times.

Using Consequence Logs to Extract Startup and Shutdown Times

Windows Event Viewer is a wonderful tool which saves all kinds of stuff that is happening in the computer. During each event, the event viewer logs an entry. The event viewer is handled past the eventlog service that cannot be stopped or disabled manually, as it is a Windows core service. The consequence viewer also logs the startup and shutdown history of the eventlog service. You can make apply of those times to get an idea of when your figurer was started or close down.

The eventlog service events are logged with two event codes. The consequence ID 6005 indicates that the eventlog service was started, and the event ID 6009 indicates that the eventlog services were stopped. Let's go through the complete process of extracting this data from the consequence viewer.

1. Open Event Viewer (printing Win + R and blazon eventvwr).

2. In the left pane, open "Windows Logs -> Arrangement."

three. In the middle pane, you will get a list of events that occurred while Windows was running. Our concern is to see just three events. Let's start sort the issue log with Event ID. Click on the Event ID label to sort the data with respect to the Effect ID cavalcade.

4. If your event log is huge, and so the sorting volition not piece of work. You tin besides create a filter from the deportment pane on the right side. Only click on "Filter current log."

5. Type 6005, 6006 in the Event IDs field labeled every bit <All Result IDs>. You tin can as well specify the fourth dimension catamenia under Logged.

• Event ID 6005 will be labeled every bit "The event log service was started." This is synonymous with system startup.
• Event ID 6006 will be labeled every bit "The event log service was stopped." This is synonymous with system shutdown.

If y'all want to investigate the Event log further, you tin go through the Event ID 6013, which volition brandish the uptime of the figurer, and Event ID 6009 indicates the processor information detected during boot time. Issue ID 6008 will let y'all know that the system started subsequently it was not close down properly.

You can besides ready custom Effect Viewer views to just view this information in the future. This saves you lot time, and y'all can set up custom views for the specific events yous want to encounter. You tin can set up multiple Issue Viewer views based on your needs, not just the startup and shutdown history.

Using TurnedOnTimesView

TurnedOnTimesView is a unproblematic, portable tool for analyzing the consequence log for startup and shutdown history. The utility can be used to view the list of shutdown and startup times of local computers or any remote figurer connected to the network. Since it is a portable tool, you will only need to unzip and execute the TurnedOnTimesView.exe file. It will immediately listing the startup fourth dimension, shutdown fourth dimension, duration of uptime between each startup and shutdown, shutdown reason, and shutdown lawmaking.

Shutdown reason is usually associated with Windows Server machines where nosotros have to give a reason if nosotros are shutting downwards the server.

To view the startup and shutdown times of a remote computer, go to "Options -> Advanced Options" and select "Data source every bit Remote Computer." Specify the IP accost or name of the computer in the Figurer Proper noun field and Printing the OK button. Now the listing will evidence the details of the remote computer.

While you can always utilize the consequence viewer for detailed assay of startup and shutdown times, TurnedOnTimesView serves the purpose with a very simple interface and to-the-signal data. For what purpose practice you monitor the startup and shutdown times of your reckoner? Which method do you prefer for monitoring?

Suspicious that someone else is logging on to your figurer? Encounter how to find who'due south been using your calculator when you're away. The above methods tin besides assist give you a clue that someone might be using your PC without your permission.

Is this article useful?

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Source: https://www.maketecheasier.com/see-pc-startup-and-shutdown-history-in-windows/

Posted by: bakerdreme1954.blogspot.com

Share this post