How To Create An Active Directory User Activity Report With PowerShell

preview_player
Показать описание

User's like to do crazy things, we all know that, but what happens we we need to track their revelries? When we need to report on who's logging in where? Well, like all the best things in working with Active Directory, this problem can be solved using PowerShell!
In this video, Anthony will walk you through the events you need to find to track logons and logoffs and which user committed those actions. But the best part about this video, is that he'll be showing you how to do this in PowerShell using the Get-WinEvent cmdlet. Meaning that you'll be building a reusable tool.
Prerequisites Include:
The PowerShell Active Directory module

Рекомендации по теме
Комментарии
Автор

can this be ran on a domain controller to see when anyone has logged in anywhere?

JC-dxfy
Автор

how can we schedule scripts if MFA is in place

shailendrapuri
Автор

I wan to know a AD users last 10 computer names he has logged into ?

Sandeepsir
Автор

Doesn't it make sense to provide a sample of the script

SnapJD