Comments on: Find Who Restarted Windows Server Core – Bonus Guide https://www.prajwaldesai.com/find-who-restarted-windows-server-core/ SCCM | ConfigMgr | Intune | Windows 11 | Azure Sun, 14 Nov 2021 18:04:13 +0000 hourly 1 https://wordpress.org/?v=6.4.1 By: Mo https://www.prajwaldesai.com/find-who-restarted-windows-server-core/#comment-28992 https://www.prajwaldesai.com/?p=220855#comment-28992 nice to have the TimeGenerated in the output 🙂

Get-EventLog -LogName System | Where EventID -eq 1074 | Format-List Message,TimeGenerated

]]> By: Prajwal Desai https://www.prajwaldesai.com/find-who-restarted-windows-server-core/#comment-23198 https://www.prajwaldesai.com/?p=220855#comment-23198 In reply to Nizar Sebahi.

The command worked for me on the latest version of server core.

]]> By: Nizar Sebahi https://www.prajwaldesai.com/find-who-restarted-windows-server-core/#comment-23196 https://www.prajwaldesai.com/?p=220855#comment-23196 Thanks Prajwal,
With new Powershell platform we can’t use Get-EventLog anymore, so just for info “Get-WinEvent -ProviderName User32” can be used 🙂

]]>