We can easily use powershell to query a computer to retrieve the time and date that windows last booted/started up.
We run a get-wmiobject query to retrieve the properties from the win32_operatingsystem class and store the results into the $osprops variable. We then run to ConvertToDateTime method on the LastBootUpTime property to return the result and store it in the $lastboot variable
$osprops = get-wmiobject -class win32_operatingsystem
$lastboot = $osprops.ConvertToDateTime($osprops.LastBootUpTime)
The $lastboot variable will then provide an output like below;
This variable can be parsed through different methods to change the output to a different format. you can view all the different methods available by running $lastboot | get-member
Some examples.
$lastboot.ToShortDateString() will return the above date in the format of mm/dd/yyyy
$lastboot.DayOfWeek will only return the day of the week (eg. Monday, Tuesday, etc)
Great article, Thanks for sharing
ReplyDelete