PowerShell Script – Get Group Policy events by CorrelationID

Update: 22. August 2014: I have posted an updated version of the script here. During his Group Policy: Notes from the Field – Tips, Tricks, and Troubleshooting session at TechEd Group Policy MVP Jeremy Moskowitz demonstrates how to filter the event log using the correlation ID. Now because I love using PowerShell I thought I create a function for that using Jeremy’s XMLquery.

  Greetings form the sunny beaches at Sardinia.

PowerShell – Retrieve System Startup Time Information

The below script gathers the following system startup time information from a local or remote client. Computername Last Wakeup time (from Sleep, Hibernate or Fast boot on Windows 8x clients)The last wakeup date/time is converted from UTC into the client local time. Last Boot time The Time Zone of the client The system wakeup / sleep message from the Windows event log Important: the script uses PowerShell remoting, it’s therefore required that the targeted clients Read More …

How to automate the creation of Windows Eventlog Custom Views

In the past couple of days I have been working on measuring system boot performance and you are probably going to see some posts from me on that subject soon. Today I want to share with you how you can automate the creation of a Windows Eventlog custom view.   While running these boot performance tests I reinstalled Windows several times on different systems and each time I wanted to collect the boot performance data from Read More …

Retrieve Windows Boot Time Script

Here’s a small batch script to get the Windows 7 Boot time shown in milliseconds. @echo off FOR /F "Tokens=4" %%a IN (‘%windir%\system32\wevtutil.exe qe Microsoft-Windows-Diagnostics-Performance/Operational /rd:true /f:Text /c:1 /q:"*[System[(EventID = 100)]]"  /e:Events ^| FIND "Duration"’) DO SET BTIME=%%a ECHO Boot Time is : %BTIME% Inspiration for this script came from the article Monitor System Startup Performance in Windows 7 written by Sean Wheeler for WindowsITPro.

Using the Windows 7 Event log to check WLAN Link Quality

When using WLAN on a day to day basis we can see the WLAN signal strength via the Windows User Interface as shown in the screenshot below. But there are other ways, and yes the approach might appear a bit inconvenient, but basically I want to demonstrate the Power of the Windows Event log. First open the Windows Event viewer (eventvwr.msc) and then within the View Menu enable the Show Analytic and Debug Logs option. Read More …