查看电脑使用记录

查看电脑使用记录 Recent computer record query skills and running commands Source: the station of finishing it popular: 3394 comments: 0 | I want to comment If you want to check the use of your computer, then you need to know the following commands: 1, in the operation input: recent, you can see the local hard disk operations (including open movies, word documents, etc.) 2, in the operation input: Local Settings, there is a History folder, inside the records in more detail 3, check the computer online records, run Local Settings, there is a Temporary Internet Files folder, which is recorded online 4, the "my computer" - "C (where the disk operating system)" - "Documents and Settings" - "Administrator" - "Recent" (the recently opened file history) 5,.C:\Documents, and, Settings\Administrator\Recent Administrator changed your name Or go straight to C:\Documents and Settings to find it See which user, after the point of opening the folder, plus \Recent This is the computer usage record What documents have you seen? When? Including a few points that are very detailed records 6. Computer log: start / control panel / performance and maintenance (remove this from the classic view) / Admin Tools / event viewer, see the record inside Check the computer usage log View switch machine Open "my computer", there are a lot of the C disk file under the Windows directory, find a SchedLgU.txt it is "scheduled" log will faithfully record computer program execution of tasks, and each boot Windows system information. Even if he secretly drives the computer in the middle of the night, I'll find out in the morning. View document records Start with my recent document, click here to see what documents he has written recently, what movies and pictures have been seen. View online records As long as he used IE browser to browse any website, in the Windows / History folder will automatically record, recent can record 99 days of all operations, including what to read what website, pictures, documents and other information to open what. The easier way is to open the IE browser, with a drop button on the edge of the address bar, and click on it to see the more recent Web sites. __________________________________________________________________________ Control panel - administration tools - Event Viewer - Security allows you to view system login and logout time. __________________________________________________________________________ A simple point, by the control panel - > management tools - > event viewer to view. Each boot will record some information about the operation of the system and the relevant time points. Complex, make a program yourself, you can do the service, or put it in the automatic batch, or start the group. The information to be recorded by the application is completed by the application. Our computer is stored in more or less some of their own privacy, even if these privacy is not important, but still do not want to expose others in the eyes, so we are not willing to be free to use their own computer. But there are some people who don't care about our feelings and use our computers at will. We don't think we can see them. That's a little Out! Because the Windows system is pretty smart. As long as someone moves our computer, we can find the truth by looking at some records of the system. So what happens when someone else moves our computer? First is the boot time. Windows will record the boot of the computer in detail, and it can be accurate to seconds. Then there are records of events, and as soon as others run a little bit of trouble with the program, Windows logs it into the system's event log. Then there are running documents, which documents have been opened and made clear at Windows. The SchedLgU.Txt file that records the boot time Window each boot, will boot time records in a SchedLgU.Txt text file, the file is hidden in the "Windows" directory C. From the moment the system is installed, it will record every time you turn on the machine. Let's go to the Windows directory and open this file. At the end of the file, you can see the following words: Task scheduler services" Started at 2011-3-30 22:06:55 At the end of the last boot time record, you can see the last boot time is 22:06:55 in March 30, 2011. If you don't turn on the machine at this point, then your computer has been moved. Calling the Windows Event Viewer Windows has a powerful log function, the log can be viewed through the event viewer, which is divided into "application", "security" and "system" three pieces of content, as long as people move your computer, generally there will be some content to be recorded. To open the "control panel", "performance and maintenance", "management tool", "Event Viewer", we first switch to "application". The event viewer is called in the control panel As in the first row of the event as an example, shown here to start Windows in SecurityCenter program, when Windows starts at the same time launched the "security center", and this process is log down. Each time the computer is started, the SecurityCenter logs the start time Therefore, it is difficult to leave a mark here as long as other people have access to the computer while you are away. View my recent document" The above two methods can only know whether or not someone moved your computer, but for the view of what files can not do anything. My recent documentation feature makes up for this gap. Check out my recent document Click on the start menu to find the "my recent document" feature, hold the mouse over it, and soon the recently visited file is displayed. Then we can know whether our privacy has been peeping. Edit prompt: If you suspect that the system files have been viewed by others, you can view them through these methods. If the computer is used by other people, the best way is to set the password for your Windows system, or set the BIOS password, from the source to stop others moving your computer.