There is an old but good reference on the Microsoft support site that givea some clarification on how Windows presents time stamps (eg event logs, NTFS times) to the user. Of particular note is this paragraph: If you are viewing another machine remotely across one or more time zones through Event Viewer, the times for [...]