How to view computer switch record in XP

        In Windows XP, we can view the computer's on/off time through the event log service of the Event Viewer. Because the event log service starts and shuts down with the computer and leaves a record in the event log.

Here it is necessary to introduce two ID numbers: 6006 and 6005. The event ID of 6006 in the event viewer indicates that the event log service has been stopped. If you do not find the event with the ID number 6006 in the event viewer of the day, it means that the computer is not shutting down properly, possibly because of system reasons. Or directly press the computer power button, did not perform the normal shutdown operation. When you start the system, the Event Viewer's event log service will be started. This is the event with ID number 6005.

With the information saved by these two ID numbers, we can easily view the computer open and shutdown records: open the "Control Panel", double-click "Administrative Tools", then open the "Event Viewer", the window on the left Select the "System" option. Right-click, select "Properties" in the shortcut menu that pops up, select the "Filter" tab in the "System Properties" window that opens, select the "Information" option under "Event Type", and in the "Events" In the Source list, select the "eventlog" option. After you continue to set other conditions, click the "OK" button to see the event record you want. Double-click a record. If the description message is "Event Service Started", it means the time when the computer is powered on or restarted. If the description message is "Event Service Stopped", it means the computer's shutdown time.