Recover Previous Computer Names

Question

Does your computer store a list of all computer names it has had? For example, let's say your computer name is changed each reboot, would your computer somewhere have a list of all the previous computer names it has had?

If you *want* to keep a record, whatever script/program is changing the name can keep a log — mpez0, Jan 06 '15 at 20:00
Hmmm...why would the computer be changing names can you elaborate a little more on this situation. — mdpc, Jan 06 '15 at 20:28

score 8 · Answer 1 · answered Apr 28 '17 at 07:57

8

If the computer changed name recently, you can find it in the event viewer in Security, filter eventid 4648 . Then you can chose the date, and you will see what was the computer name at that time.

answered Apr 28 '17 at 07:57

Félix M

81
1
3

Hah - I knew there had to be a way to do this! – user2676140 Apr 29 '17 at 07:20

score 8 · Accepted Answer · answered Jan 06 '15 at 19:42

8

You can only find the last name of the computer, a list is not possible. Open the Registry Editor and navigate to the address:

HKLM\Software\Microsoft\SchedulingAgent\OldName

Source

answered Jan 06 '15 at 19:42

stderr

10,264
2
32
49

I'm sure there's a log file (like in XP) that shows name changes...? – Kinnectus Jan 06 '15 at 19:58
@BigChris If there is, I have not been able to find it. :) – stderr Jan 06 '15 at 20:01
1

C:\Windows\debug\NetSetup.log ? It won't just show computer names because it's a log of the domain join process. No guarantee a full list, though. I've never needed to know so I only know it's "one" way of getting a hostname from a dead pc – Kinnectus Jan 06 '15 at 20:02
@BigChris In Windows 7 not exists that file. I have not found.. – stderr Jan 06 '15 at 20:05
1

Ah, probably because the computer hasn't joined a domain. I think you're out of luck I'm afraid. – Kinnectus Jan 06 '15 at 20:09
@BigChris “( ͡° ͜ʖ ͡°)” – stderr Jan 06 '15 at 20:18
It was mere curiosity - no big deal or loss on it. – user2676140 Jan 06 '15 at 22:23
This key does not hold the correct value on more recent Windows versions. The Event Viewer method works. – cmo Jan 10 '23 at 22:11

score 1 · Answer 3 · answered Jun 08 '19 at 05:44

This should search security log for your previous computer names that do not match your current one:

$SecLog=get-eventlog security -InstanceID 4648 | where {$_.MachineName -notlike "$Env:Computername"}

Then you can use that first variable to give you the whole list (probably lots of duplicates)

$AlloldNames=$SecLog.MachineName

This one will give you just the most recent old name that does not match your current one:

$MostRecentOldName=$SecLog.MachineName[0]

Recover Previous Computer Names

3 Answers3