• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 650
  • Last Modified:

How does Windows determine unexpected shutdown time?

Hello Experts

Does anyone know how Windows determines the time that a system shut down unexpectedly?  I'm guessing Windows does some sort of 'heartbeat timestamp' somewhere that gets cleared during a normal shutdown, and if Windows does not shut down cleanly, upon restart it will detect this uncleared timestamp and determine that it was the approximate time of the unexpected reboot.  The reason for my asking is because I need to know what the time interval might be between the 'heartbeat timestamps'.

Thanks for any help in advance.
0
Tuckrat
Asked:
Tuckrat
1 Solution
 
McKnifeCommented:
0
 
rindiCommented:
Most "unexpected shutdowns" are caused by system crashes, and they create dump files and events in the eventlogs. So either the time those dumps were created is output, or the time the eventlog was recorded.
0
 
TuckratAuthor Commented:
Thanks for the quick answer.  This is exactly what I was looking for.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now