How know time when PC was shut down?

[mike]

How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?

 

[PeeCee]

How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?

Control Panel
Administrative Tools
Event Viewer
Click System in the left window
In the list that shows in the right window event number 6006 is the eventlog
closing time, effectively the last thing done before the PC shuts down.
Likewise events 6009 and 6005 are usually the first items recorded in the
event log when the PC starts up.

Best
Paul.

 

[VanguardLH]

How can I tell what time my WinXP was last shut down?

Is there a file which has its timestamp changed during shutdown (but
is not changed on startup)?

Alternatively, is there an entry made in a log file during shutdown?

Something else?

- Run the local security policy editor (secpol.msc).
- Go to the following node in the tree list:
Security Settings -> Local Policies -> Audit Policy
- Edit the "Audit system events" policy.
- You'll want to enable the Success event (to show when the OS was
requested to shutdown).
- You might also want to enable the Failure event (to see when something
tried to shutdown the OS).