Wednesday, June 10, 2015

Generate List of RDS Logon and Logoff Events

A powershell script to list:

Date/Time , logon or logoff, Event ID, Username, SessionID, Source IPAddress, Computer user logged onto.
Eg:
2015-04-28T15:38:22,23,logoff,andrewst,6,,Server08
2015-04-28T15:36:37,23,logoff,sheffieldd,3,,Server10
2015-04-28T15:30:40,21,logon,ryank,4,172.16.0.122,Server08
2015-04-28T15:21:13,23,logoff,powelll,8,,Server09
2015-04-28T15:12:35,21,logon,sheffieldd,3,172.16.0.138,Server10
 You can get the script here:  http://pastebin.com/4vhqVCQE

No comments:

Post a Comment