Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Client OS - Window XP

Domain Controller:- Window server 2008 Standard R2

I had one Window XP system, i want to find out when the system has started or boot ( at what time and at which date ). I don't know which parameter / word should i search in Event Log.

For finding out shutdown time, i simply find the word "Shutdown" in Event Log.

Can you guide me which word should i find for finding Start up or boot time

share|improve this question
up vote 4 down vote accepted

Look up the following event in EventViewer ( System )

6009 and 6005 same time stamp, system just started.

6013 - system has been up for a day or more, time in seconds.

6006 - the system was rebooted or shutdown.

share|improve this answer

Look for the message saying the event log has started.

Event 6005 Event Log Service has started

Or Event 6009 with info about the OS build, service peck level, etc.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.