How to See PC Startup And Shutdown History in Windows 10

There are times when a user wants to know the startup and shutdown history of a computer. Mostly, system administrators need to know about the history for troubleshooting purposes. If multiple people use the computer, it may be a good security measure to check PC startup and shutdown times to make sure the PC is being used legitimately. In this article we will discuss two ways to keep track of your PC shutdown and startup times.

Using event logs to extract startup and shutdown times

Windows Event Viewer is a wonderful tool which saves all kinds of stuff that is happening in the computer. During each event, the event viewer logs an entry. The event viewer is handled by eventlog service that cannot be stopped or disabled manually, as it is a Windows core service. The event viewer also logs the start and stop times of the eventlog service. We can make use of those times to get an idea of when our computer was started or shut down.

The eventlog service events are logged with two event codes. The event ID 6005 indicates that the eventlog service was started, and the event ID 6009 indicates that the eventlog services were stopped. Let’s go through the complete process of extracting this information from the event viewer.

1. Open Event Viewer (press Win + R and type eventvwr ).

2. In the left pane, open Windows Logs -> System.

3. In the middle pane you will get a list of events that occurred while Windows was running. Our concern is to see only three events. Let’s first sort the event log with Event ID. Click on the Event ID label to sort the data with respect to the Event ID column.

4. If your event log is huge, then the sorting will not work. You can also create a filter from the actions pane on the right side. Just click on “Filter current log.”

5. Type 6005, 6006 in the Event IDs field labeled as . You can also specify the time period under Logged.

• Event ID 6005 will be labeled as “The event log service was started.” This is synonymous with system startup.
• Event ID 6006 will be labeled as “The event log service was stopped.” This is synonymous with system shutdown.

If you want to investigate the Event log further, you can go through the Event ID 6013 which will display the uptime of the computer, and Event ID 6009 indicates the processor information detected during boot time. Event ID 6008 will let you know that the system started after it was not shut down properly.

Using TurnedOnTimesView

TurnedOnTimesView is a simple, portable tool for analyzing the event log for startup and shutdown times. The utility can be used to view the list of shutdown and startup times of local computers or any remote computer connected to the network. Since it is a portable tool, you will only need to unzip and execute the TurnedOnTimesView.exe file. It will immediately list the startup time, shutdown time, duration of uptime between each startup and shutdown, shutdown reason and shutdown code.

Shutdown reason is usually associated with Windows Server machines where we have to give a reason if we are shutting down the server.

To view the startup and shutdown times of a remote computer, go to “Options -> Advanced Options” and select “Data source as Remote Computer.” Specify the IP address or name of the computer in the Computer Name field and Press the OK button. Now the list will show the details of the remote computer.

While you can always use the event viewer for detailed analysis of startup and shutdown times, TurnedOnTimesView serves the purpose with a very simple interface and to-the-point data. For what purpose do you monitor the startup and shutdown times of your computer? Which method do you prefer for monitoring?

Content Manager at Make Tech Easier. Enjoys Android, Windows, and tinkering with retro console emulation to breaking point.

How to Access the Windows 10 Startup Folder

Plus how to disable or enable programs

The Windows Startup Folder was an important folder that was easily discoverable via the Start Menu in Windows versions past. It began as far back as Windows 95 and any programs located within the Startup Folder would boot up and run anytime the computer was powered on.

It used to be that whenever you booted up your Windows operated computer, it would seek out and execute a batch script called autoexec.bat. Anyone with knowledge of Power DOS could use a text editor to modify this script in order to add their favorite programs to boot up, along with the Windows operating system. This made it so that everything you wanted to use was already loaded once the computer booted.

The use of autoexec.bat continued all the way through the Windows NT years, but Microsoft was intent on moving users away from a scripted, command-line environment. It instead wanted to encourage the use of the graphical interface model with windows, files, and folders, and, in doing so, made all subsequent versions of their operating systems not require autoexec.bat.

They would eventually do away with it entirely, however, the Windows 10 Startup Folder can still be found today.

How to Access the Windows 10 Startup Folder

Back before Windows 95, batch scripts and command-line interfaces were essential in getting your computer to do anything at all. All of the clickable icons you take for granted today didn’t exist. Instead, to run something like Microsoft Word, it required that you opened a command-line interpreter and typed winword.exe.

Windows 95, though it still allowed for users to perform nearly every important task using a command line, such actions were easier through the graphical user interface. You could click on the Program Files folder and find icons labeled with the program you wanted to run. All that was needed was a quick double-click and the program was launched.

Windows 95 was the first step in changing how we access programs. Today, clicking a program to have it launch is commonplace. It feels as if this is how it has always been. Barely anyone uses commands to open programs anymore. However, interestingly enough with Windows 10, we’ve actually seen a small surge in the revival of command line access via the use of PowerShell.

The Startup Folder In The Start Menu

The Start Menu was first created in Windows 95 and slightly resembles the Start Menu we have today in Windows 10. It’s that little flyout menu that pops out when you click the Start or Windows icon in the lower-left corner of your desktop. In Windows 95, this is where you’d find the Startup Folder.

When Windows 8 was launched, Microsoft decided to eliminate the Start Menu. Even though all of the functionality was still present in the operating system, it was much harder to locate everything. Microsoft wanted users to go a different way with scheduling programs for automatic execution.

Much to Microsoft’s dismay, the pushback from the user community was so great that the Start Menu was quietly brought back in with Windows 10.

The Windows 10 Startup Folder is similar to the one found in Windows 7. However, it’s no longer accessible the same way. The Windows 10 Startup Folder no longer pops up in the Start Menu as it once did. The functions are still there, although some of the operational details have changed. Now, accessing the Windows 10 Startup Folder takes a bit of navigation.

Two Windows 10 Startup Folders

When it comes to the Windows 10 Startup folder, it can be found in two different locations. One Windows 10 Startup folder operates at the system level and is shared among all user accounts (All Users folder), while the other operates at a user level and is unique to that user’s account (Current User folder).

The second one only really matters if you have multiple accounts on your Windows 10 computer. Each account will contain a unique Startup Folder in addition to the universal Startup Folder.

Understanding the distinction between the All Users and Current User Startup Folders is important when it comes to troubleshooting. Attempting to understand why a certain application isn’t opening, or when working with applications that feature user-based licensing or access restrictions will require you know which Startup Folder to configure.

There is one area that enables you to interact with the Startup function, which contains all of the programs found inside of the folder. The only difference is that programs cannot be added or removed. You can only enable or disable those currently inside of the Startup folder. This location is the Windows Task Manager.

Accessing The Windows 10 Startup Folder

There are a few ways in which to access the Windows 10 Startup folder. To access the Windows 10 Startup folder, the first option is through File Explorer.

You’ll need to enable the “Show Hidden Files” option in order to see certain folders in the path. Open the File Explorer and drop one of the following paths into the Quick access bar.

• The All Users Startup Folder is located at the following path:
  • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
• The Current User Startup Folder is located here:
  • C:\Users\[User Name]\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

From these locations, you can add or remove programs that you want executed whenever you boot up your Windows 10 computer.

An alternative way to do this is to jump directly to each folder with a Run command.

Open the Run function dialog box by pressing the Windows key + R key simultaneously.

• The All Users Startup Folder requires the following path:
  • Shell:common startup
• The Current User Startup Folder requires:
  • Shell:startup

These will take you directly to the folder containing the startup programs pertaining to the specified folder.

Enabling and Disabling Startup Programs

If all you want to do is enable or disable certain programs within the Windows 10 Startup folder, you can access this functionality through both the Windows Task Manager or Settings window.

To access Startup using the Task Manager:

• Right-click the Taskbar and from the menu that pops up, select Task Manager.

• In the Task Manager window, click over to the Startup tab to see the programs.

• Right-click a program. In the pop-up, select either enable or disable.
  • The program will now adhere to the status set on your next boot up.

To access Startup using via Windows Settings:

• Open the Start Menu by clicking the Windows icon in the lower-left portion of your desktop.
• From the menu, select Settings (Cogwheel icon).

• Choose Apps.
• On the left side menu, select Startup.

• In the main menu, click the toggles of those programs you want to enable or disable, to On or Off.

The Launch Order For The Windows 10 Startup Folder

Any item placed in either of the Startup Folders will not launch immediately upon login as it did back in the days of Windows 95. Instead, Windows 10 launches programs in a very specific order beginning with necessary system processes and any items in the Task Manager’s Startup tab. The programs you’ve added to the Startup Folders will follow after.

This usually doesn’t take long, but if you have lots of first- and third-party applications and services already configured to launch at boot, it could take a few minutes depending on the processing speed of your computer.

Too many programs in the Windows 10 Startup folder may run the risk of extensive downtime, slowing your computer to unworkable speeds while it attempts to launch each program. It’s a good idea to ensure that you only place necessary programs in these folders and keep the overall count to a minimum.

Former US Army IT communications specialist who began his online blogging career in 2016. Joseph has over 10 years experience in the IT industry as both an analyst and communications expert. He’s a night owl and an avid Red Bull consumer who spends most of his downtime enthralled by online gaming and website building. Read Joseph’s Full Bio