I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up?
If I examine the security log, I see no less than 26 Logon and Special Logon events. I would rather examine a set of events involving me and my desktop than all the behind the scenes service type events.