Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up?

If I examine the security log, I see no less than 26 Logon and Special Logon events. I would rather examine a set of events involving me and my desktop than all the behind the scenes service type events.

share|improve this question

One solution could be to create a custom view showing EventID 4101 from the Application log.

This is the windows license validation that happens every time you log on to the computer.

Looking at my own list, i have 6 events from the last 5 days, all in the morning when i've logged on,

share|improve this answer
I get zero 4101 events. – ProfK Feb 20 '14 at 13:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .