Use PowerShell to report on BlueScreens

PowerTip: Use PowerShell to report on BlueScreens

Question: You have a user complaining of receiving the ‘Blue Screen of Death’ all the time. How can you use Windows PowerShell to determine actual frequency of occurances?

Answer: Use the Get-EventLog cmdlet to check the application log for a source from ‘Windows Error *’. Choose the timewritten and the message properties, filter on the word ‘bluescreen’ and sent the contents to a table for ease of viewing. This technique appears here:

Get-EventLog -LogName application -Newest 100 -Source ‘Windows Error*’ |

select timewritten, message | where message -match ‘bluescreen’ | ft -auto -wrap

Ed Wilson is the bestselling author of eight books about Windows Scripting, including Windows PowerShell 3.0 Step by Step, and Windows PowerShell 3.0 First Steps. He writes a daily blog about Windows PowerShell call Hey, Scripting Guy! that is hosted on the Microsoft TechNet Script Center; for more PowerTips check out the Hey, Scripting Guy! blog.

The above tip was previously published in an issue of WServerNews, a weekly newsletter from TechGenix that focuses on the administration, management and security of the Windows Server platform in particular and cloud solutions in general. Subscribe to WServerNews today by going to and join almost 100,000 other IT professionals around the world who read our newsletter!

Mitch Tulloch is an eleven-time recipient of the Microsoft Most Valuable Professional (MVP) award and a widely recognized expert on Windows Server and cloud computing technologies.  Mitch is also Senior Editor of WServerNews. For more information about him see


About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top