Figure 1: Sample WMIC output showing System Restore is enabled
CreationTime 20050131204004.089267-000	Description System Checkpoint	EventType 100	RestorePointType 11	SequenceNumber 2