Windows has a powerful tool for learning about the activities that are done on your computer. The installation or uninstallation of applications or the execution of certain services can be detected by the event viewer. If you ask yourself how to know if someone enters my pc and what programs has opened without permission? , This article is for you.
How to know if someone enters my PC and what programs have they opened without permission?
Il viewer of events is a tool that shows the actions happening on any computer. In this sense, it is possible to see what time of day the computer was turned on, when the system was used and the activities that someone else could have performed without your permission.
Certainly the best thing to avoid these circumstances is to put a password on your PC in Windows, but in case you haven't, the event viewer can help you see the information in more detail.
Next, we present relevant information on using the Event Viewer and how you can take advantage of this tool to find out if they are using your equipment without permission.
What is the event viewer?
Il viewer Event or Event Viewer is a Windows administrative tool that allows you to get information about all the activities that have been performed on your computer.
Procedure to find out if someone enters my PC
If you want to find out the processes that have been run on your PC without permission, it is recommended to use the "Event Viewer" tool which is available in Windows 10 and is very easy to use.
Access the Windows Event Viewer
To open the Windows system event viewer, you have to go to the taskbar and in the "Search Windows" option (identified with a magnifying glass icon) write "View event logs". There, you can select the «Event Viewer» application.
Another way to access the Windows Event Viewer
There is another way to access the Windows Event Viewer via a special command. From the option Search for Windows, type eventvwr.msc and you will immediately see the «Event Viewer» window.
Use the event viewer
Once in the event viewer, you need to locate "Windows Logs". Press the + option to view the folder and choose "System". To the right of the panel you will see a long list of items. Therefore, you have to filter the information to access the content that interests you.
Filter information with the event viewer
In the right corner of the panel, you will find a section called "Actions". Look for the "Filter Current Record" option located in the "System" tab. Then, a new window will open and in «All Event IDs» you have to write: 1, 12, 13, 42.
Interpret event IDs to find out if someone enters the PC
THE ID event 1 identifies when the computer has exited the "sleep" state. THE ID event 12 is related to when the computer was started, while the event 13 yes refers to when we turned off the computer and finally the event 42 specifies when the computer went into "sleep" or "hibernation".
Each event contains the date, time, and type of event that the system logged. In this way you will be able to deduce whether it was you who used the equipment at a certain time or not.
Procedure for finding out which programs have been opened without permission
To find out if someone has installed, uninstalled or used programs without your authorization, you need to go back to "Windows Logs" from the event viewer. When you open the folder, choose "Applications". On the right side of the panel, select "Create custom view" where you will see the entries based on the date and records you want to filter.
With the above information you will be able to see the movements and actions performed on your computer when you weren't using it. In fact, you can even know the time and date the PC was turned on and off, which is very useful for being aware and protecting your information.
On the other hand, it is always good to take action. As we pointed out earlier, use a password or making a folder invisible in Windows 10 are among the actions you should consider for
protect the integrity of your information.
