Last shutdown time

[me]

Hi,
Is it possible to retrieve the last boot or shutdown time from the registry?
I assume the key exists. In this case, is it a win32 feature or a specific
NT feature.

Thanks in advance
Manfred

 

[Mark V]

Hi,
Is it possible to retrieve the last boot or shutdown time from the
registry? I assume the key exists. In this case, is it a win32
feature or a specific NT feature.

Interesting question. I don't know about "from the registry".
The system up-time (running time) is stored in the registry.

In some cases the pagefile.sys date/time will indicate the bootup time.
Not certain how reliable that is.

The registy system hive files on disk would have a shutdown date/time
stamp if you could view them from outside the OS. But you could use a
system shutdown script to create a stamped file perhaps. e.g.
type nul>%systemdrive%\filename

The same could be done with a system startup script.

 

[Mark V]

Hi,
Is it possible to retrieve the last boot or shutdown time from the
registry? I assume the key exists. In this case, is it a win32
feature or a specific NT feature.

Interesting question. I don't know about "from the registry".
The system up-time (running time) is stored in the registry.

In some cases the pagefile.sys date/time will indicate the bootup time.
Not certain how reliable that is.

The registy system hive files on disk would have a shutdown date/time
stamp if you could view them from outside the OS. But you could use a
system shutdown script to create a stamped file perhaps. e.g.
type nul>%systemdrive%\filename

The same could be done with a system startup script.