View computer switch machine records in Windows XP

        Windows XP, view the computer switch machine recording

In Windows XP, we can use the "Event Viewer" to view the event log service computer open, shut down time. Because the event log service starts and shuts down with the computer and leaves a record in the event log.

Here it is necessary to introduce two ID numbers: 6006 and 6005. The event ID of 6006 in the event viewer indicates that the event log service has been stopped. If you do not find the event with the ID number 6006 in the event viewer of the day, it means that the computer is not shutting down properly, possibly because of system reasons. Or directly press the computer power button, did not perform the normal shutdown operation. When you start the system, the Event Viewer's event log service will be started. This is the event with ID number 6005.

saved by these two ID number information, we can easily see the computer open, off record: Open the "Control Panel", double-click the "Administrative Tools" and open the "Event Viewer" window on the left Select the "System" option. Right-click, select "Properties" in the shortcut menu that pops up, select the "Filter" tab in the "System Properties" window that opens, select the "Information" option under "Event Type", and in the "Events" In the Source list, select the "eventlog" option. After you continue to set other conditions, click the "OK" button to see the event record you want. Double-click a record. If the description message is "Event Service Started", it means the time when the computer is powered on or restarted. If the description message is "Event Service Stopped", it means the computer's shutdown time.