How To Find If Someone Logged Into Your Windows PC Behind Your Back?

Ever wanted to find out if someone used your computer behind your back? Sometimes we gives our computer's password to people for a short time and then don't change it. Which enables them to use your pc anytime they want, even when you are not around. So if you want to know if someone used your pc when you were not around, then this article is for you.

Whenever a user session starts Windows adds its date and time to the Event Viewer. Event Viewer is a inbuilt feature in Windows operating system which keeps the records like hardware glitch, security changes, session logins, etc. If you want to know more about Event Viewer then click here.

How to find if someone logged in to your computer?

First open Event Viewer. You can do that by pressing "WindowsKey+R" and then typing "eventvwr" in the run box Or you can just search for it.

After Event Viewer windows shows up click on "Windows Log >> System" it will look like this

Then on the right side you will see "Action" panel, here click on "Filter Current Log..."

Now you will see another window, In the window enter the Event ID 6005 and 6006 as shown in the screenshot

Now hit OK button .

Here event Id 6005 means when the event log service was started and event Id 6006 means when the event log service was stopped.

That's it, just like that you can see when your pc was used unauthorized. 

Hope you guys like this tutorial. Please share if you like this and feel free to comment. And please like our facebook page.