2

I would like to, retrospectively, determine my arrival times at the office. Is there an event log somewhere that would record the PC being unlocked. For that matter, being started up?

If I examine the security log, I see no less than 26 Logon and Special Logon events. I would rather examine a set of events involving me and my desktop than all the behind the scenes service type events.

1 Answer 1

0

One solution could be to create a custom view showing EventID 4101 from the Application log.

This is the windows license validation that happens every time you log on to the computer.

Looking at my own list, i have 6 events from the last 5 days, all in the morning when i've logged on,

1
  • I get zero 4101 events.
    – ProfK
    Feb 20, 2014 at 13:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .