What is the purpose of computer management, event viewer, etc. in the management tool

For XP, let's talk about it in a nutshell.

Local security policy: It is to set the policy, for example: password policy, specify the minimum number of passwords; Internet access policy, closing a certain port, etc.

Service: a service that is running on your computer, such as a printing service; Antivirus and other services, you can set to stop, restart, run, pause the corresponding service of your choice, and you can also set the boot to run, not to run, etc.

Computer management: This is easier to use, it is a comprehensive computer management platform including: disk management, user management, sharing management, device management, etc.

Event Viewer: Records some information about your computer's runtime, including system, software, and security.

Data source (ODBC): It is the most basic database management in a computer.

Performance: You can see some corresponding graphs, such as; CPU, memory, etc.

Component service: This is basically not used, it should be the management of system components.

It's so useful

Let's give you a few examples

Event Viewer: You can view the exception information that is logged during the running of Windows (useful for hardware and software troubleshooting and hacking analysis).

Computer management: You can control the hardware state of almost all local and privileged online computers. It is possible to manage all disk states of the machine, especially in the state of multiple disks, and the management style can be increased to the disk level, which is helpful for the management of multiple disks!

Each tool is different, and you can check it out with System Service Terminator.

In Windows XP, we can check the on/off time of the computer through the Event Viewer's event log service. This is because the event log service starts and shuts down with the computer and leaves a record in the event log.

If you do not find the event with ID 6006 in Event Viewer, it means that the computer has not shut down properly, which may be caused by system reasons or if you have pressed the power button of the computer and did not perform the normal shutdown operation. When you boot the system, the Event Viewer's event log service will start, which is the event with ID number 6005.

With the information saved by these two ID numbers, we can easily check the computer on and off records: open the "Control Panel", double-click on the "Administrative Tools", then open the "Event Viewer", and select the "System" option in the window on the left. Right-click, select "Properties" in the pop-up shortcut menu, select the "Filter" tab in the "System Properties" window that opens, select the "Information" option under "Event Type", and select the "Eventlog" option in the "Event**" list, continue to set other conditions, and click the "OK" button to see the required event records.

Double-click on a record, if the description is "Event Service Started", it represents the time the computer was turned on or restarted, and if the description is "Event Service Stopped", it represents the time when the computer was shut down.

Hello, the event of the system running error is usually saved permanently, while the normal event is automatically deleted.

No, only recent events will be saved.