There is a way to use a 'bootlog' file to detect problems during startup.
You press F8 during startup to get the safe mode menu, and select the option
to start using a bootlog. There will be a file in %windir%
The area you want to look at is the "Performance" app in Control Panel.
Admins spend a lot of time acquiring the skill it takes to maintain logs of
user activity with this tool. I suggest you seek out a site for 'performance
logging' info.