As I understand it
C\windows\setuplog.txt contains the information about the setup process when Windows is being installed. But, what is the time zone information? Local or UTC? The system I am checking, the first entry reads
08/19/2004 165913 [That's 459pm]
but, when I look at the Event Logs (which, I believe are in UTC), the first entry under the SysEvent.evt log reads
8/19/2004 85852am
This computer should be in Central Time, so, how could it be that the event log is earlier than the Windows setup itself?? Is there a more reliable way to determine when the OS was installed – perhaps a preferred method?
Thanks)
Assume you're talking XP of some variant (XP was around in 2004 wasn't it?) You need to provide this info, some members get tectchy without it.
And I assume you mean C\windows\setupapi.log? Times in setupapi.log are in Local.
I'm not sure how you square an 8-hr time difference between CST and UTC in August, CST is usually 6 hrs out give or take the couple of weeks around when the clocks change
Have you checked the Software registry hive? (assuming a Windows NT variant) There is an install date/time in there, in Unix format and in UTC, although that is not always reliable, depending on re-installs and upgrades etc.
HKEY_Local_Machine\Software\Microsoft\WindowsNT\CurrentVersion\InstallDate
The 'default' timezone for Windows is PST, and a machine will be in this timezone until you tell it otherwise i.e. at the start of an install it will be in sunny California, until you give it the bad news that it's actually in rainy England wink
Event logs are Unix dates, so are in UTC
Hope that helps
Paul
Assume you're talking XP of some variant (XP was around in 2004 wasn't it?) You need to provide this info, some members get tectchy without it.
And I assume you mean C\windows\setupapi.log? Times in setupapi.log are in Local.
I'm not sure how you square an 8-hr time difference between CST and UTC in August, CST is usually 6 hrs out give or take the couple of weeks around when the clocks change
I am referring to setuplog.txt, setupapi.log is different. I am also puzzled by the 8-hour difference, which was the nature of my original post. However, as paulandrewsfca pointed out, the 'default' timezone for Windows is in sunny California PST (where I just so happen to be), which would go a long way towards explaining the 8-hour offset!
Thank you both very much! D
I am still baffled, as it turns out
- Event logs show first entry as 8/19/2004 85852am. [UTC?]
- c\windows\setuplog.txt shows first entry as 8/19/2004 165913 [PST?]
- The Created time of the setuplog.txt in Paraben P2 when set to view time in UTC is August 19, 2004, 459pm
So, I am confused. What is the actual, UTC time of the installation of this system? Keep in mind that this system was configured for Central Standard Time, I located that in the registry.
Is it possible there is some kind of standard build of Windows in a corporate environment going on here?
I don't have details as an example, but all of our most recent XP SP3 installations have the same installation date. We have over 10,000 users
Can't check right now as I'm a W7 guinea-pig (the joys)
As Paul said, what time does it specify in the HKLM\Software\Microsoft\WindowsNT\CurrentVersion\InstallDate registry key? That should help you to narrow down the correct date and time.
P.s, The problem you are having is one of the many reasons I am thankful I live in the GMT timezone )
Howdy all
HKLM\Software\Microsoft\WindowsNT\CurrentVersion\InstallDate
does not seem to exist? I checked in Vista and all over the registry of my XP image (which is pre-SP1).
Now I am even more confused, because a couple days ago I checked the
\SYSTEM\ControlSet001\Control\TimeZoneInformation
And the Bias and ActiveTimeBias matched, indicating to me that no DST was in effect … but now I re-checked it and they are different. Bias is 360, and ActiveTimeBias is 300. Does that mean that DST is in effect, and that the time 'should' read 1 hour earlier? I am not clear on what a disparity between the two indicates and in what direction.
I am terribly confused as to how to proceed, and I really need to wrap my head around this. Your expertise is sorely needed, and greatly appreciated!
Just had a quick glance at this thread, i.e. not read properly, but have you considered that the clock on the computer was at the wrong time when the install started and then was put to correct time at some point during the install. Don't you get the chance to set time and date at some point during the install?
I think I have come across this in the past and it was the explanation in that instance.
H
Just had a quick glance at this thread, i.e. not read properly, but have you considered that the clock on the computer was at the wrong time when the install started and then was put to correct time at some point during the install. Don't you get the chance to set time and date at some point during the install?
I think I have come across this in the past and it was the explanation in that instance.
H
I really like your avatar, clever! I have considered what you said, but how can I prove it, and ascertain when it was changed?