Determine when a Windows machine was rebooted through the Event Log

Voltaire T December 30, 2015 0

Filter the System event log with Events 6005 and 6006.

6005: The Event Log was started.
6006: The Event Log was stopped.

No comments

Subscribe to: Post Comments ( Atom )