Can I know when an application was started/closed in Windows 10?


  1. Posts : 28
    Windows 10
       #1

    Can I know when an application was started/closed in Windows 10?


    I'd like to know wWhen an application was started or closed: for example: Google Chrome, Microsoft Word, Notepad etc.

    I've been looking at the Event Viewer longs but couldn't find any logs for this.

    I wonder if there's some way to know this, preferrably without having to install any application.

    Any help much welcome
      My ComputerSystem Spec

  2. dalchina's Avatar
    Posts : 19,933
    Win 10 Pro (1903)
       #2

    A brief search suggests
    windows - How can I get a history of running processes - Super User


    Perhaps that will point you in the right direction
      My ComputersSystem Spec


  3. Posts : 28
    Windows 10
    Thread Starter
       #3

    dalchina said: View Post
    A brief search suggests
    windows - How can I get a history of running processes - Super User


    Perhaps that will point you in the right direction
    Thanks for your answer. I already tried that, that's the article I based myself on. Neither 4688,4689 nor all other Security, System and Application IDs I tried get triggered when an app is opened/closed in my testing. This works fine to track shut-downs, start-up, restart, User account login, log out, etc, but I still couldn't' find how to track when apps are opened or closed.
      My ComputerSystem Spec

  4. dalchina's Avatar
    Posts : 19,933
    Win 10 Pro (1903)
       #4

    Just to confirm, those event ids appear conditional on this:

    Sure. You can use Windows' built-in event logging (assuming you're not on some cheap edition that doesn't have it). Press Win+R and type gpedit.msc to open the group policy manager
    1. In the left pane, navigate to
      Local Computer Policy \ Computer Configuration \ Windows Settings \ Security Settings \ Local Policies \ Audit Policy
    2. In the right pane, double-click "Audit process tracking" and check both boxes

    From now on, all process creations and deletions (and failed attempts at same) will appear in the Security log.
    To view them, run Event Viewer. (Hit the Windows key and start typing "Event Viewer".) In the left pane expand the "Windows Logs" sub-tree and click "Security". All the security events will be displayed.
    But that requires Pro up, or perhaps the equivalent registry info for the setting.

    For interest (?) on event id 4688
    Windows Security Log Event ID 4688 - A new process has been created

    Clear example here:
    How can I track what programs come and go on my machine? - Ask Leo!
      My ComputersSystem Spec


 

Related Threads
I need to run an application on a guest account that will be shown on a secondary monitor. My hope is that there is a way to keep anyone using the guest account from closing the window without an admin password. Any alternative ideas would be...
my dell inspiron when is much time under sleep mode, closed screen, closed laptop, and when is turned back, screen is black with visible light on it, led light, and i can move cursor if i leave it like that for few minutes i can also notice dim...
My application which is in Startup folder is not started after restarting the computer. I find some solutions on internet like 1. Hkey_Local_Machine\ Software\ Microsoft\ Windows\ CurrentVersion\ Policies\ System\ Set EnableLUA to 0 (See at right...
Hi, I have Windows 10 version 1607 but for more than a month I have not been able to open Office.I bought a new Packard-Bell imedia with 8.1 already loaded then in August 2015 it was upgraded free.Just after last Christmas I could not use any of...
I've recently noticed that sometimes, not always but sometimes. When I exit a program or game to desktop. Windows 10 decides to re launch that program or game. it is seriously annoying & was wondering if anyone has this problem & know of a fix?
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:26.
Find Us