Reboot Notification

Taliseian · Apr 1, 2026

Greetings all,

Just recently I fell asleep in the room my computer is in - hey, I'm old and sometimes the gaming itch doesn't go away

- and woke up to my monitor resetting after a system restart.

System is fine as the reboot was caused by Windows Update (W11 update to 26200.8117), but it took me a bit to comb through my Event Viewer and see the Informational entry about Windows Update.

I'm sure this has happened before, but it got me thinking. Is there a way to let the user know any system details about why the reboot happened, if it knows any of course. Something like a popup or a notepad text that could appear once the system is back to the desktop or maybe a way to get a text/email notification about the reboot and why?

...just a thought from an old man sipping his coffee and debating on getting another gaming session in at way too early-o'clock.....

Josey Wales · Apr 1, 2026

Somewhere in event viewer it should tell you.

dacrone · Apr 1, 2026

Powershell:

Code:

Get-WinEvent -FilterHashtable @{ LogName = 'System'; Id = 41, 1074, 6006, 6605, 6008; } | Format-List Id, LevelDisplayName, TimeCreated, Message

If you really want it in notepad, you can output the results to a .txt somewhere.

If you want it to ^ do that automatically at logon, use task scheduler.

Ed Tittel · Apr 1, 2026

Blogged about this very thing this morning. The minor build # 8117 is a dead giveaway: you got the OOB update last nite, just like I did. Here's the post OOB KB5086672 Pops Up.
HTH,
--Ed--

dacrone · Apr 1, 2026

here, had some extra time:

save this as a .ps1 (use ISE to do so)

Code:

# Generate timestamp for the file name
$timestamp = Get-Date -Format "yyyy-MM-dd_HH-mm-ss"

# Build the output file path on the user's Desktop
$desktopPath = [Environment]::GetFolderPath("Desktop")
$outputFile = Join-Path $desktopPath "Power Cycle Causes ($timestamp).txt"

# Collect the event logs
$events = Get-WinEvent -FilterHashtable @{
    LogName = 'System'
    Id      = 41, 1074, 6006, 6605, 6008
} | Format-List Id, LevelDisplayName, TimeCreated, Message | Out-String

# Write results to the file
$events | Out-File -FilePath $outputFile -Encoding UTF8

# Optional: Display where the file was saved
Write-Host "Report saved to: $outputFile"

you can then run the ps1 at logon or manually. it will output to
Power Cycle Causes (Current Date) (Current Timestamp).txt

pseymour · Apr 1, 2026

If you want it to pop up in a window, you could use Out-GridView. Works all of the time with PowerShell 7. Also works with Windows PowerShell 5.x, but you have to have the ISE installed.

Powershell:

# Collect the event logs
Get-WinEvent -FilterHashtable @{
    LogName = 'System'
    Id      = 41, 1074, 6006, 6605, 6008
} | Out-GridView -Title 'A Fancy Title Here'

View attachment 167526

garlin · Apr 2, 2026

I heard you like on-screen notifications!!

This batch file creates a Windows notification message that pops up right after your first desktop logon after a reboot. If you missed reading the message, it stays in the taskbar's Notification cache. You will only get notified on your first logon, not get bothered again until another reboot.

1. To install the scheduled task, run the included batch file.

2. To remove the task, run as Admin:

Code:

schtasks /delete /tn NotifyLastReboot /f

Developer notes: I removed Event ID 6006 since it wasn't useful, and blocked the really interesting event ID's.

Search

Reboot Notification

Taliseian

Well-known member

My Computer

System One

Josey Wales

Endeavor to Persevere

My Computers

System One System Two

dacrone

Well-known member

My Computer

System One

Ed Tittel

Well-known member

My Computers

System One System Two

dacrone

Well-known member

My Computer

System One

pseymour

putting the mental back in experimental

My Computer

System One

garlin

Well-known member

Attachments

My Computer

System One

Similar threads

Latest Support Threads

Latest Tutorials