Use the system to help you know who moved your computer

  
Computer Store News Our computers store more or less of their privacy. Even if these privacys are not important, they still don't want to be exposed to others' eyes, so we generally don't want our computers to be used by others. But some people don't care about our feelings, use our computer at will, and think that we can't see it. This kind of idea is a bit out! Because the Windows system is still very smart. As long as someone has moved our computer, we can find out the truth by looking at some of the system's records.
So what will be recorded when someone else moves our computer? The first is the time to boot. Windows will record the boot status of the computer in detail, which can be accurate to the second. Second is the record of various events, as long as someone has a little problem after running the program, Windows will record it in the system's event log. Then there are the documents that have been run, which documents have been opened, and you can see them at a glance in Windows.
Record the boot time of the SchedLgU.Txt file
Each time the Window is turned on, the system will start the recording time in a text file called SchedLgU.Txt. This file is hidden, located in the C drive "Windows" In the catalog. From the moment the system is installed, it will record your time each time you turn it on. We enter the Windows directory to open this file, you can see the following words at the end of the file:
“Task Scheduler Service”
Started at 2011-3-30 22:06:55
At the end is the record of the last boot time, which shows that the last boot time was 22:06:55 on March 30, 2011. If you are not booting at this point in time, then your computer has been moved.
Calling Windows Event Viewer
Windows has a powerful logging function. The logs of these records can be viewed through the “Event Viewer”, which is divided into “Applications” and “Security”. ” and “system” three pieces of content, as long as someone has moved your computer, in general, some content will be recorded.
Open “Control Panel”→“Performance and Maintenance&>→“Administrative Tools”→“Event Viewer';We first switch to “Applications” .
Calling Event Viewer in Control Panel
Taking the first-ranked event as an example, this shows the startup of the SecurityCenter program in Windows, indicating that Windows started the security center at the same time. And this process was recorded by the log.
The SecurityCenter will record the startup time each time you start your computer
So it is very difficult to leave a trace of it whenever someone else has turned the computer off while you are away.
View “My recent documents”
Both methods can only know if someone has moved your computer, but there is nothing you can do to see which files are being moved. And "My recent documentation" function is a good complement to this gap.
View my recent documents
Click on the Start menu and find the "My Recent Documents" function, hover your mouse over it, and soon the recently accessed files will be displayed. This way we can know if our privacy has been sneaked.
Editor's Note:
If you suspect that the system files have been viewed by others, you can view them by these methods. If the computer has been used by others, the best way is to set a password for your Windows system, or set a BIOS password to prevent others from moving your computer from the source.
Copyright © Windows knowledge All Rights Reserved