Brainlitter » Quick Reference for determining when a server was last rebooted

Quick Reference for determining when a server was last rebooted

Popup_shutdown_refI’m always googling this information because I can’t recall the event ID so I’ve decided to quickly paraphrase it. If, as part of troubleshooting, you are trying to determine when the last Windows Server reboot was, these are useful clues:

In the Windows System Event Log

  • Event 6005 – this was when the server was last turned on (this might be the only clue, if the server was shut down hard such as a power outage)
  • Event 6006 – this was when the server was successfully shutdown in a controlled manner (when the event log service was stopped is really what this logs)

For more details, this blog post spells it out nicely: http://lifehacker.com/5459919/use-event-viewer-to-tell-when-your-pc-last-rebooted

2 responses to “Quick Reference for determining when a server was last rebooted”

  1. Old School method: Enter ” net statistics workstation ” at a command prompt.

    1. true true. I guess the reason I like the other approach and I suppose I didn’t state it the first time is that in the event viewer I could filter by those events and see ALL the shutdowns, etc. historical as far back as the logs reached.

Comments are closed.