If you've got NT 4 you can check the event log for event ID 6009. This is written when windows is started

[ 30 July 2001: Message edited by: chris_bol ]