Windows - recording shut-down times

Luis luis at anachreon.co.uk
Fri Feb 20 05:44:15 CST 2009


Hiya,

No problem!

I do Mac, Linux and Windows. I get these things from trying to get  
the same info from all of them. If you need any help, let me know.

Cheers,

Luis.


On 20 Feb 2009, at 10:35, Jim Sims wrote:

>
> On Feb 20, 2009, at 11:20 AM, Luis wrote:
>
>> Hiya,
>>
>> You could parse the Event Log ('eventvwr' on the command line) and  
>> check for Event ID 6005, which has the start time for the Event Log.
>> Not too sure if 6006 or 6008 indicates when it has stopped,  
>> although I think you'd only need the start time and work out the  
>> rest from there.
>> Event ID 6009 should time with the start of the Event Log, and  
>> also includes the Windows version info, it that's of any use...
>>
>> The PsTools from Microsoft have the 'psloglist' command line tool  
>> that give you access to remote machines and includes  
>> authentication access (can also dump the file to the server).
>>
>> Another option is to use the built in script: cscript %systemroot% 
>> \system32\eventquery.vbs
>> Append '-?' (without the quotes!) to get the switches. You'll find  
>> in there several formats for the output file.
>
> Thanks a bunch Luis!  Look like great tips for this OS X user who  
> only occasionally uses Windows.
>
> sims
> _______________________________________________
> use-revolution mailing list
> use-revolution at lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your  
> subscription preferences:
> http://lists.runrev.com/mailman/listinfo/use-revolution
>




More information about the use-livecode mailing list