Hi
We are using a Server 2008 R2 DFL
I’m looking to detect “interactive” logins via a powershell script however I don’t see an interactive logon property on user accounts.
I have searched online and see a group policy to show interactive logon messages but didn’t see clearly how to enable interactive login auditing of user accounts.
From what I can gather id set a policy on domain controllers telling them to record interactive logins and thereafter I can use power shell to fetch this information.
I cant seem to find the specific steps to toggle the auditing of interactive logins to on within group policy.
Am I on the right track ?