Filtering on logon type
Need to create reports and alerts for succesful Windows logons, filtering out specific logon types.
Specifically only want to see successful logon (event id 528 & 540) for user 'administrator' for logon type 2 (Interactive) and logon type 10 (RemoteInteractive).
Can you suggest the best approach?
Specifically only want to see successful logon (event id 528 & 540) for user 'administrator' for logon type 2 (Interactive) and logon type 10 (RemoteInteractive).
Can you suggest the best approach?
Topic Participants
Phil Marshall
eventlog_support
scoobyd
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?