quick check for when your user rebooted last
net statistics workstation Works great when you don’t want to trust the words out of your users mouth. Just look at the date and time it last started. not 100% accurate all the time, but I think the fastest check i know right now.