Table of Contents
People who use computers with Windows 11 are likely to run into some problems. This is because Windows 11 is still being tested and Check Startup and Shutdown History in Windows. If you use a Dev or Beta build of Windows 11, you will have more problems.
When you are using Windows 11, you may want to look at the history of how your PC started up and shut down. There are many reasons why you might want to look at the history of when a computer started up or shut down. For example, if you share your PC with family members, you may want to look at the history of when the PC was started and shut down to see if someone used it while you were away.
Yes, there could be other reasons, like if the technician needs to fix BSOD errors and asks you for this report. No matter what the reason, Windows 11 makes it easy to look at your Startup and Shutdown history.
Check Windows Startup History
- Press the Start key.
- Search and open “Event Viewer.”
- Go to “Windows Logs.”
- Go to the “System” folder.
- Click the “Filter current log” option.
- Type “6005” in the “Event Sources” field.
- (Optional) Select a time period from the “Logged” dropdown menu.
- Press “Ok.”
- All filtered events are startup events.
- Select an event and look at the “The event log service started” heading to see the startup time.
Check Windows Shutdown History
- Press the Start key.
- Search and open “Event Viewer.”
- Go to “Windows Logs.”
- Go to the “System” folder.
- Click the “Filter current log” option.
- Type “6006” in the “Event Sources” field.
- (Optional) Select a time period from the “Logged” dropdown menu.
- Press “Ok.”
- All filtered events are startup events.
- Select an event and look at the “The event log service started” heading to see the startup time.
Use the Event Viewer
The Windows Event Viewer is a tool for system administrators that shows error messages, events, warnings, and other information about how your operating system is running.
Every time a program starts on your computer, it sends a message to the Event Log. The same is true for every healthy program before it shuts down. Event Logs are made whenever there is access to the system, a change in security, a bug that causes an error, or a driver that doesn’t work right.
- Event ID 41 – this event is logged when you reboot your PC without shutting it down completely.
- Event ID 1074 – this event is logged in two situations: either by a shutdown command from the Start menu or when an application causes the computer to restart or shutdown.
- Event ID 6005– it indicates system startup. This event is created when the Event log service starts.
- Event ID 6006 – this event is recorded in a case of a proper shutdown.
- Event ID 6008 – this event is logged if your computer shuts down unexpectedly. As an example, if you shut down the PC using the power button directly or if the system encounters an error, causing the computer to shut down immediately.
FAQ
Can I see when my PC was turned on?
Windows Event Viewer is a utility that comes included with the Windows operating system. It’s intended to be used by system administrators to view event logs on local and remote machines, but it can also tell you when your computer has been turned on.
How do I check my reboot logs?
- Open the Event Viewer console ( eventvwr.msc ) and go to Windows Logs -> System;
- Use the Event Log filter by clicking Filter Current Log in the context menu;
- In the filter box, enter the EventID 1074 and click OK;
How do I check system logs?
To open the run window, press the Windows key + R on your keyboard. In the box that says “Run,” type “eventvwr” and then click “OK.” Open up the Windows Logs menu in the window for Event Viewer. You can find different types of event logs under the Windows Logs menu. These include application, security, setup, system, and forwarded events.