Ask a new question

How to view app and program usage history on Windows 11?

Hello everyone!

Is there any way to view the history of what apps/programs were opened or what actions(such as folder views) were performed on Windows 11? I have heard about the Event Viewer, but I have no clue of what to check and under what category to check. For example, suppose I want to know when the Windows Photos app was opened, is there any logs where I can view the history of these actions, alongwith timestamps?

Answer
Answer
Hi, Mayukh. I'm Robinson, and I’m happy to help you today.

You can do it using the Audit Policy, but this feature is only available on the Windows Pro version.

1-Right-click on Start then click on Run
2-Type: gpedit.msc and click on Ok
3- Go to:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy

The basic audit policy settings under Security Settings\Local Policies\Audit Policy are:

-Audit account logon events
-Audit account management
-Audit directory service access
-Audit logon events
-Audit object access
-Audit policy change
-Audit privilege use
-Audit process tracking
-Audit system events

After enabling the Audit Policy you will be able to see the events in the Event Viewer under Windows Logs > Security.

You can see which event ID you need to check at this link.
https://learn.microsoft.com/en-us/windows/secur...

4 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info

Last updated May 18, 2024 Views 11,022 Applies to: