Hello all, more powershell fun. How often are you trouble shooting an application install or “insert error here” and the end user says, “Yes I rebooted!!!”.  Not that we don’t trust the end user, but it helps to be able to verify that the computer was rebooted. Here is a small script I use to determine the computer uptime and reboots, it will show who rebooted it and why.  To load the function save and run the script. The function can be called from the PS session.  This can be added to your PS profile to load when you start a PS session.

The script is made up of 2 functions.  One for determining the computer uptime and the other to read the event log and report on reboots.

You can either run it on a single computer or supply a list of computers from text file with one computer per-line.

Get-rebootInfo  -computername  “server”

Get-Content computers.txt | ForEach-Object { Get-rebootInfo -computername $_}



Function Get-rebootInfo {

## Computers
#Adds a title section to the output with Date, computer ran on, and Uptime.
“Server Reboot Report”
“Generated $(get-date)”
“Generated from $(gc env:computername)”
“Genertaed for $Computername”
Get-Uptime $computername

Stores the events in a hash table for faster parsing and reporting.
Get-WinEvent -ComputerName $computername -FilterHashtable @{logname=’System’; id=1074} |
ForEach-Object {
$rv = New-Object PSObject | Select-Object Date, User, Action, Process, Reason, ReasonCode, Comment
$rv.Date = $_.TimeCreated
$rv.User = $_.Properties[6].Value
$rv.Process = $_.Properties[0].Value
$rv.Action = $_.Properties[4].Value
$rv.Reason = $_.Properties[2].Value
$rv.ReasonCode = $_.Properties[3].Value
$rv.Comment = $_.Properties[5].Value
} | Select-Object Date, Action, Reason, User

#function used to get LastBootUpTime from Win32_OperatingSystem class and calculate uptime based on the local system time.

Function Get-Uptime {
Param([Parameter(Mandatory = $True,
ValueFromPipeLine = $False,
Position = 0)] [Alias(”)] [String]$ComputerName = “localhost”
)#END: Param
$LastBoot = (Get-WmiObject -Class Win32_OperatingSystem `
-computername $ComputerName).LastBootUpTime
$sysuptime = (Get-Date) – `[System.Management.ManagementDateTimeconverter]::`
Write-Host -foregroundcolor cyan “($ComputerName) System uptime is:” `
}#End Function Get-Uptime


About the Author: steve bowman

Three Minutes For A More Secure & Efficient Infrastructure

Short and to the point, Steve’s Email Blasts give you endpoint management tips, tricks, and news in three minutes or less email read-time, guaranteed.

Model says no to spam. Privacy Policy

Model Technology Solutions

Model Technology Solutions is a small but mighty band of infrastructure experts. We’ve helped companies in diverse industries to modernize and automate their infrastructures through effectively managing their Microsoft endpoint suite.

With us on your team, you’ll watch your security and compliance go up and your IT team’s costs (and headaches) go down. You’ll relax in knowing that your endpoints will be secure and online when your users need them most. And you’ll finally get back to your most-important tasks.

Model Technology Solutions
12125 Woodcrest Executive Drive, Ste. 204 Creve Coeur, MO 63141

Phone: (314) 254-4138
General Inquiries: model@model-technology.com
Sales and Quotes: sales@model-technology.com