5 Ways to View the USB Device History in Windows

Windows retains logs of every thing that occurs in your pc. And inside these logs is an in depth documentation of when USB units are related and disconnected.

There are quite a few the reason why you may have to see a document of your USB connection historical past. These embrace troubleshooting your related peripherals and checking if somebody has connected a storage machine with out your data. Listed here are 4 alternative ways you possibly can view the USB machine historical past in your Windows PC.

Why Does Windows Log USB Connections?

Windows retains a document of each USB machine that’s related to and unplugged from the pc it’s put in on. It does this in order that future connections of the identical machine are acknowledged and might be accomplished shortly, with out having to put in the machine each time.

t is not there to allow you to see the USB units which were related, however when you know the way to view these system data, the knowledge is there so that you can discover.

Utilizing USBDeview to View USB Connections

USBDeview is a small and transportable utility that permits you to shortly view the USB connection historical past of any pc it’s working on. In addition to displaying machine historical past, it would additionally show your entire at the moment related USB units. You may obtain USBDeview freed from cost from the NirSoft web site.

1. After downloading the software program, extract it from the zipped folder. USBDeview is a conveyable utility so that you needn’t set up it earlier than utilizing it.
2. Double-click the USBDeview utility file to run the app. It might take a number of seconds to populate the checklist.
3. When the checklist of USB connections updates, at the moment related units are highlighted in inexperienced. Historic connections are left in white.
4. You may click on the Linked tab to separate and kind the totally different connections.
5. Operating the app as Administrator permits you to see the time and date the units had been final related and eliminated. To see this info, look within the final two information columns.

Viewing USB Connection Historical past Utilizing PowerShell

Should you desire to not use third-party software program to see your USB machine historical past, you should utilize PowerShell as a substitute. You need to use PowerShell to question the system registry and produce an inventory of all USB storage units at the moment related, in addition to these beforehand related.

You probably have by no means used PowerShell earlier than, you possibly can learn more about this great tool in our information to Windows PowerShell.

1. Open PowerShell from the primary Windows app checklist. You needn’t open as an administrator, however you possibly can if you want.
2. To see a user-friendly checklist of the USB storage units, enter the command: Get-ItemProperty -Path HKLM:SYSTEMCurrentControlSetEnumUSBSTOR** | Choose FriendlyName

   

3. It’s also possible to see the units listed with a bit more info, however in a much less user-friendly method, by typing: Get-ChildItem HKLM:SYSTEMCurrentControlSetEnumUSBSTOR | Choose PSChildname

Keep in mind that these strategies question the USBSTOR part of the registry, so solely units which can be acknowledged as USB storage will probably be proven.

Viewing USB Connection Historical past within the Registry

The PowerShell instructions detailed above question the Windows Registry, however if you happen to desire you possibly can go into the Registry and manually discover the details about USB storage connections. This has the good thing about offering more info, which might be helpful in case you are troubleshooting.

1. Open the Registry Editor by looking for Regedit utilizing Windows Search.
2. As soon as the Registry Editor is open, you must navigate to the next handle within the sidebar: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumUSBSTOR
3. The USB units will probably be listed within the sidebar. Should you increase every one you’ll find more details about them.

The issue with each this and the PowerShell methodology is that you just will not be capable to see when the USB units had been related or disconnected. However you possibly can see this info within the Windows Occasion logs.

Viewing USB Connection Historical past With Occasion Logs

Windows has a built-in occasion viewer which can be utilized to view USB connection historical past. Nonetheless, it’s simpler to make use of a third-party app referred to as FullEventLogView. This small and transportable app exhibits the identical info as you’ll see within the Windows Occasion Viewer however shows it in a way more user-friendly method. FullEventLogView is a conveyable app, which means it would not must be put in earlier than you should utilize it.

1. Run the app by double-clicking the applying file within the downloaded folder.
2. The primary time you employ the app, it would take a number of seconds to scan all of the occasion logs which can be obtainable.
3. To indicate solely the USB connection occasions, click on Choices > Superior choices.
4. Within the new window that opens, deselect all Occasion Ranges aside from Info. Then choose the date vary you wish to view logs for.
5. Change Present all occasion IDs to Present solely the desired occasion IDs and enter 2003,2102. These occasion IDs are for when USB units had been related and after they had been ejected.
6. Change Present all channels to Present solely the desired channels and enter: Microsoft-Windows-DriverFrameworks-UserMode/Operational
7. Click on Okay and any occasions that match your settings will probably be displayed as an inventory. The occasion time column exhibits when the USB units had been related and ejected.
8. You may click on on any of the occasions to see a bit more info.

Viewing USB Connection Historical past of Computer systems on Your Native Network

All of the strategies detailed above solely mean you can see the USB connection historical past of units on a single pc. If you wish to see the connection historical past of all computer systems on an area network, USB Historical past Viewer from intelliAdmin could possibly be the reply.

1. After downloading the app, double-click the EXE file to open it.
2. You should enter the title of your pc earlier than you possibly can view the USB historical past. If you do not know the title of your pc, go to Settings > System > About. Your pc title is proven on the prime.
3. Click on the Begin button to see the USB historical past. You may then increase the outcomes to see particulars such because the time and date it was final used.
4. If you wish to see the USB historical past of one other PC in your native network, you will have to enter the username and password of the pc, in addition to its area on the network. In case you are undecided how to define the area of a pc in your native network, try these helpful networking instructions.

Viewing USB Connection Historical past, Made Simple

There are a number of methods to see the historical past of USB units which were related and disconnected out of your pc. Not all of the strategies right here present the identical quantity of knowledge, however every has the potential to be helpful for various conditions. If you must see which USB connections have been made, one in every of these strategies is certain to assist.