Last time windows was booted

  • Thread starter Thread starter Linda
  • Start date Start date
L

Linda

I work in a lab with several other people. I want to know
when the last time a machine was booted. In UNIX you can
enter a command to see the last time a system was booted.
How do you do that in Windows 2000?
 
If you enable auditing of system events you can look in the security log in
Event Viewer for event ID 812 for Windows startup. This can be done remotely
and you could also use a program like Event Comb to find that event ID on
multiple computers. There are also free utilities such as Windows Uptime in
link below. --- Steve

http://www.webattack.com/get/winuptime.html
 
Another way is to look in the System Event log and look for the following
events:

Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6009
Date: 1/5/2004
Time: 4:28:05 PM
User: N/A
Computer: BLIMTOOLS
Description:
Microsoft (R) Windows (R) 5.01. 2600 Service Pack 1 Uniprocessor Free.

and then

Event Type: Information
Event Source: EventLog
Event Category: None
Event ID: 6005
Date: 1/5/2004
Time: 4:28:05 PM
User: N/A
Computer: BLIMTOOLS
Description:
The Event log service was started.

This is the Event log service starting immediatly post reboot.

blim
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| >Content-Class: urn:content-classes:message
| >From: "BugginOuT" <[email protected]>
| >Sender: "BugginOuT" <[email protected]>
| >References: <[email protected]>
| >Subject: Last time windows was booted
| >Date: Thu, 8 Jan 2004 08:09:36 -0800
| >Lines: 15
| >Message-ID: <[email protected]>
| >MIME-Version: 1.0
| >Content-Type: text/plain;
| > charset="iso-8859-1"
| >Content-Transfer-Encoding: 7bit
| >X-Newsreader: Microsoft CDO for Windows 2000
| >X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| >Thread-Index: AcPWAc+hQlFvVR3NTB29nYkAsjo4Mw==
| >Newsgroups: microsoft.public.win2000.security
| >Path: cpmsftngxa07.phx.gbl
| >Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.security:19143
| >NNTP-Posting-Host: tk2msftngxa14.phx.gbl 10.40.1.166
| >X-Tomcat-NG: microsoft.public.win2000.security
| >
| >You can just launch Task Manager, and it'll tell you how
| >long the system as been up, which equals to how long it
| >hasn't been rebooted.
| >
| >
| >>-----Original Message-----
| >>I work in a lab with several other people. I want to
| >know
| >>when the last time a machine was booted. In UNIX you
| >can
| >>enter a command to see the last time a system was
| >booted.
| >>How do you do that in Windows 2000?
| >>.
| >>
| >
 
Back
Top