How can I determine the date on which SP2 was installed on an XP system?
Thanks
Registry keys within the Uninstall key include KB articles and hotfixes. Keys have LastWrite times, analogous to the last modification times on files. As the keys usually aren't modified after installation, this will most likely be associated with the date the hotfixes were installed.
What about if a system's OS is installed using an imaging software? Would the date/times on these files be of when the system was re-imaged or when the image was created?
Depending on what software is used (caveat because I do not know what happens in every instance) the date is from when the image was created or updated. I have done several investigations for a company that has a standard boot image and that is one of the first things we check is to make sure the OS on the box matches the corporate image.