Get-SbecBackupConfig is accessible with the help of BootEventCollector module. To configure BootEventCollector, go through this link.


Get the backup configuration files that are available to restore.


The Get-SbecBackupConfig cmdlet gets the backup configuration files that are available to restore.

Whenever a new configuration is set in the Boot Event Collector, the old configuration is saved to a backup file (see Checkpoint-SbecActiveConfig for more information). Normally, the backup files contain the UTC timestamp in the format YYYYMMDDhhmmssfffffff (“f” being the digits of the fractions of a second) in their names, allowing you to track the history of changes and to restore the older configurations. If the collector was started with the noCfgHistory switch, only one last configuration is kept in a file with the fixed name, and the last modification timestamp on it is used to track the configuration timestamp. The way to specify the switch for the service is by creating the registry value “HKLM:\SYSTEM\CurrentControlSet\Services\BootEventCollector\Parameters\noCfgHistory” with type REG_DWORD set to 1.

Get-SbecBackupConfig returns the list of the available backup configuration files, in the order from the most recent to the oldest. You can restore these files explicitly with Restore-SbecBackupConfig, or navigate them sequentially with Undo-SbecActiveConfig and Redo-SbecActiveConfig.

Even though it’s possible to create the backup files with future timestamps (either manually or when the computer’s notion of time is moved back abruptly), and these files are listed by Get-SbecBackupConfig, they are ignored by the Undo-SbecActiveConfig and Redo-SbecActiveConfig commands. You can use Restore-SbecActiveConfig to restore them.

This command returns a hash table with the elements <OriginalTimestamp> and <Files>. The <OriginalTimestamp> element contains the original timestamp (that is, the time it was originally set) of the current active configuration. You can compare it to the timestamps of the backup files to determine which configuration is active, and which configurations would be restored with the Undo and Redo commands. It is in the binary FILETIME format, as are the timestamps in the other Sbec commands.

You can convert the binary FILETIME format to the PowerShell time with this code: \[DateTime\]::FromFileTimeUtc($filetime)

You can convert the PowerShell time to the FILETIME format with this code: $datetime.ToFileTimeUtc()

You can convert the PowerShell time (if it is marked as UTC time) to the timestamp format used in the names of the configuration backup files with this code: $datetime.ToString("yyyyMMddHHmmssfffffff")

The reverse conversion can be done with this code: \[DateTime\]::ParseExact($fnametm, "yyyyMMddHHmmssfffffff", $null, "AssumeUniversal, AdjustToUniversal")

To check whether a PowerShell time is marked as UTC time, use this code: $datetime.Kind -eq "Utc"

You can convert a PowerShell time in the local representation to the UTC representation with this code: \[DateTime\]::FromFileTimeUtc($datetime.ToFileTimeUtc())

The <Files> element contains an array of entries describing the available backup files. Each entry is a hash with fields Name (containing the file name), Timestamp containing its original timestamp in the FILETIME format, and Time containing its original timestamp converted to the PowerShell DateTime format in local time, for convenience. The entries in the array are ordered from the most recent to the oldest.

You must have Builtin Administrator privilege to run this command.



Runs the cmdlet on the remote computers through a remote session. Enter a session object, such as the output of a New-CimSession or Get-CimSession cmdlet, or an array of these objects. The default is to run the cmdlet on the local computer. For more information, see About_CimSession.

Default value:None
Accept pipeline input:False
Accept wildcard characters:False


Specifies the names of the computers on which you want to perform the operation. You can specify a fully qualified domain name (FQDN), a NetBIOS name, or an IP address for each computer. For more information see Invoke-CimMethod on MSDN.

Default value:None
Accept pipeline input:False
Accept wildcard characters:False


Get-SbecBackupConfig [[-ComputerName] <String[]>] [[-CimSession] <CimSession[]>] [<CommonParameters>]

—————–Example 1—————–
Get available backup configuration files
PS C:\> Get-SbecBackupConfig | Format-List
This command gets the list of available backup configuration files and uses the pipeline operator to pass them to Format-List.

You can check the Version, CommandType and Source of this cmdlet by giving below command.

Get-Command Get-SbecBackupConfig

Get-Command Get-SbecBackupConfig powershell script command cmdlet

You can also read about

  • Checkpoint-SbecActiveConfig
  • Redo-SbecActiveConfig
  • Restore-SbecBackupConfig
  • Undo-SbecActiveConfig

To know more PowerShell cmdlets(Commands) on BootEventCollector click here

Click on this Link for an Single place where you get all the PowerShell cmdlet sorted based on the modules.

You can also refer other blogs on PowerShell at link

You can also refer other blogs on Microsoft at link

And also if you required any technology you want to learn, let us know below we will publish them in our site

Like our page in Facebook and follow us for New technical information.

References are taken from Microsoft

Leave a Reply

Your email address will not be published. Required fields are marked *