This is NOT foolproof, but in MOST cases, the server service and/or the workstation service will not be restarted on an XP pro workstation EXCEPT at boot. SO, you can run NET STATISTICS WORKSTATION or NET STATISTICS SERVER and they will tell you what date and time the services (and thus implied the system) was last started.