Hi John, There is no way to get this started once the OS starts other that writing a service to do this. There is also no garentee that if it were a service, that it would start early enough to log these events. You could perhaps you could run PerfMon…