如何获取系统历史记录？ [英] How to Get System history?

问题描述

亲爱的所有人，



我正在使用vs2010和c＃windows应用程序。我想获得当天的系统历史记录（例如用户每天在我们的系统中打开/使用的应用程序/软件）。任何人告诉我有任何可能做那个。





谢谢提前！...

Dear All,

I am Using vs2010 and c# windows application. I want get the system history of the day (for example the user what are application/software open/using in our system per a day). Any one tell me any possibilities there for do that one.


Thanks advance!...

推荐答案

Windows默认情况下不会记录运行的应用程序 - 但是您可以告诉它提供基本的审计跟踪。

打开secpol.msc ...本地策略/审计政策。 （对于Windows 10，请参见此处： http://www.isunshare.com/windows-10/5-ways-to-access-local-group-policy-editor-on-windows-10.html [ ^ ]

激活审核流程跟踪的成功（也可能是失败），每次流程开始或结束时，Windows都会在安全事件日志中创建一个日志条目。不幸的是，您将看到运行的进程，但不会看到它启动的命令行。请注意，这将生成大量数据！

Windows doesn't by default log applications that run - but you can tell it to provide a basic audit trail.
Open secpol.msc ... local policies/audit policy. (for Windows 10, see here: http://www.isunshare.com/windows-10/5-ways-to-access-local-group-policy-editor-on-windows-10.html[^])
Activate Success (and maybe also Failure) on "Audit process tracking" and windows will create a log entry in the security event log every time a process starts or ends. Unfortunately you'll see the process that ran, but not the command line it was started with. Be aware that this will generate a lot of data!

这篇关于如何获取系统历史记录？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！