TurnedOnTimesView v1.46

When connecting a remote computer and the 'Use New Event Log API' option is turned on, the loading process is now much faster than the previous versions.

Added option to specify user name and password to connect a remote computer (In the 'Advanced Options' window). (Only when the 'Use New Event Log API' option is turned on)
Fixed to display error on status bar when TurnedOnTimesView fails to access the event log. (Only when the 'Use New Event Log API' option is turned on)
The 'Use New Event Log API' option is now turned on by default.

А кто знает консольную команду, которая сразу откроет на список событий, без всех этих предварительных ласк?

Added 'Use New Event Log API' option. You should try this option if you have the latest updates of Windows 10 and TurnedOnTimesView stopped working. Be aware that currently when using the 'Use New Event Log API' option, the loading process is slower than the old API mode.

Added 'Last System Event Time' column, which displays the time of the last system event before the computer was turned off. This column is useful when there is no shutdown event and the 'Shutdown Time' column is empty.
When there is no shutdown event ('Shutdown Time' is empty), the duration is now calculated according to the 'Last System Event Time'.
When event 41 from Microsoft-Windows-Kernel-Power is detected ('The system has rebooted without cleanly shutting down first'), the 'Shutdown Type' column now displays 'Unexpected Shutdown'.
Fixed issue: Under certain circumstances, TurnedOnTimesView detected the turn on/off events incorrectly because the algorithm assumes that the events are sorted by their timestamp, but in some cases they are not... TurnedOnTimesView now sorts the events by their timestamp before processing them to ensure that the turn off/on detection algorithm works correctly. Be aware that due to this change the loading process might be slower and consume more memory.
Added 'Save All' (Shift+Ctrl+S).

TurnedOnTimesView now reads archive log files also on a remote computer ( from \\Computer\Admin$\System32\Winevt\Logs).
You can now choose whether to read the archive log files in the 'Advanced Options' window.

TurnedOnTimesView now scans events of computer sleep/resume and treats them like turn-off/turn-on events (The 'Shutdown Type' displayed for these events is 'Sleep').
You can turn off this feature from the 'Advanced Options' window ('Consider the sleep/resume events as turn off/on' ).

Спасибо, возьму себе такую утилиту.

TurnedOnTimesView now reads archive log files (Archive-System-*.evtx) when using the external disk mode and local computer mode. Be aware that in order to read archive log files from local computer you have to run TurnedOnTimesView as Administrator.
Added 'Run As Administrator' option (Ctrl+F11).

TurnedOnTimesView now displays the computer name (local or remote) in the window title.

Fixed to display date/time properly according to daylight saving time settings.

Added new command-line options: /Source , /RemoteComputer , /ExternalFolder
The settings of the 'Advanced Options' window are now saved to the .cfg file.

Added browse button in the 'Advanced Options' window to choose the external folder.

Added option to read the data from external disk (In 'Advanced Options' window). You should specify the location of the event log folder on the external drive ( C:\Windows\System32\winevt\Logs on Windows Vista/7/8 or C:\WINDOWS\system32\config on older systems)