How know time when PC was shut down?

  • Thread starter Thread starter mike
  • Start date Start date
M

mike

How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?
 
mike said:
How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?
Click to expand...


Control Panel
Administrative Tools
Event Viewer
Click System in the left window
In the list that shows in the right window event number 6006 is the eventlog
closing time, effectively the last thing done before the PC shuts down.
Likewise events 6009 and 6005 are usually the first items recorded in the
event log when the PC starts up.

Best
Paul.
 
mike said:
How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?
Click to expand...

- Run the local security policy editor (secpol.msc).
- Go to the following node in the tree list:
Security Settings -> Local Policies -> Audit Policy
- Edit the "Audit system events" policy.
- You'll want to enable the Success event (to show when the OS was
requested to shutdown).
- You might also want to enable the Failure event (to see when something
tried to shutdown the OS).
 
Back
Top