The VMware Carbon Black Tech Zone is live! Checkout this great resource: Mastering Carbon Black Audit & Remediation.

Status of Fast Startup

Description: This query checks a registry key to see if Fast Startup is enabled or disabled on the computer.  

What The Data Shows: With Windows 10 and 11, Fast startup can prevent a computer from truly shutting down if enabled since it goes into a hibernation mode.  When fast startup is disabled, a shutdown will be treated like a restart clearing all memory etc. allowing the computer to run more efficiently. 

SQL: SELECT CASE cnt
WHEN 0 THEN "DISABLED"
ELSE "ENABLED"
END "Fast Startup"
FROM (SELECT count(name) AS cnt
FROM registry
WHERE PATH='HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Power\\HiberbootEnabled' AND DATA = 1);

 

 

Tags (2)
1 Comment
jnelson
Carbon Black Employee
Status changed to: Approved

Thanks for your contribution!