Is there any cmdlets or GUI way in Intune to see/check whether end user has restarted the device recently or not or can get a complete report via PowerShell or GUI?

Vinod Survase 4,711 Reputation points
2023-10-07T10:47:09.6066667+00:00

Is there any cmdlets or GUI way in Intune to see/check whether end user has restarted the device recently or not or can get a complete report via PowerShell or GUI?

Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
352 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,749 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
894 questions
Microsoft Intune Enrollment
Microsoft Intune Enrollment
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Enrollment: The process of requesting, receiving, and installing a certificate.
1,269 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,473 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. ZhoumingDuan-MSFT 9,080 Reputation points Microsoft Vendor
    2023-10-09T02:47:36.8233333+00:00

    @Vinod Survase, Thanks for posting in Q&A.

    According to your description, I know that you are looking for some methods to check whether end user has restarted the device recently or not.

    Based on my researching, I found that you can check whether end user has restarted the device via PowerShell, here are the content of script:

    • Get-EventLog -LogName System |? {$_.EventID -in (6005,6006,41,1047)} | ft TimeGenerated,EventId,Message -AutoSize -wrap

    Event ID 6005 should be labeled as "The event log service was started." This is synonymous with system startup.

    Event ID 6006 should be labeled as "The event log service was stopped." This is synonymous with system shutdown.

    Event ID 41 - this event is logged when you reboot your PC without shutting it down completely.

    Event ID 1074 - this event means you manually restart the device.

    User's image

    Hope this can be helpful.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.