none
如何查出Windows 2000 系統是否有重新開關機 RRS feed

解答

  • Hi,Joel:

     

    檢查 Eventlog 可以檢閱,

     

    • Event 6005 is logged at boot time noting that the Event Log service was started. It gives the message "The Event log service was started".
    • Event 6006 is logged as a clean shutdown. It gives the message "The Event log service was stopped".
    • Event 6008 is logged as a dirty shutdown. It gives the message "The previous system shutdown at time on date was unexpected".
    • Event 6009 is logged during every boot and indicates the operating system version, build number, service pack level, and other pertinent information about the system. Depending on your current configuration, it gives a message similar to: "Microsoft (R) Windows NT 4.0 1381 Service Pack 6 Multiprocessor free".

    相關的文章請參考 http://support.microsoft.com/kb/196452/en-us ,

     

    希望對你有幫助!

     

    2007年12月3日 上午 07:42

所有回覆

  • Hi,Joel:

     

    檢查 Eventlog 可以檢閱,

     

    • Event 6005 is logged at boot time noting that the Event Log service was started. It gives the message "The Event log service was started".
    • Event 6006 is logged as a clean shutdown. It gives the message "The Event log service was stopped".
    • Event 6008 is logged as a dirty shutdown. It gives the message "The previous system shutdown at time on date was unexpected".
    • Event 6009 is logged during every boot and indicates the operating system version, build number, service pack level, and other pertinent information about the system. Depending on your current configuration, it gives a message similar to: "Microsoft (R) Windows NT 4.0 1381 Service Pack 6 Multiprocessor free".

    相關的文章請參考 http://support.microsoft.com/kb/196452/en-us ,

     

    希望對你有幫助!

     

    2007年12月3日 上午 07:42
  • 謝謝你的幫忙

    但是系統的system log 無法讀取( The system log file is corrupt )只能讀Application log  有無其他辦法查出系統何時有重新開關機過

    謝謝

     

     

    2007年12月3日 上午 09:06
  • 哈哈~還有一個比較不聰明但好用的方式,不過要配合GPO使用

     

    1.首先產生兩個批次檔:

    open.bat

    echo ======================= >> c:\log.txt
    echo open: >> c:\log.txt
    date /t >> c:\log.txt
    time /t >> c:\log.txt

     

    close.bat

    echo ======================= >> c:\log.txt
    echo close: >> c:\log.txt
    date /t >> c:\log.txt
    time /t >> c:\log.txt

    2.然後到GPO設定[啟動]時執行open.bat,[關機]時執行close.bat

     

    請參考看看,希望對你有幫助!

     

    2007年12月4日 上午 01:02