Detect interactive login's

Viewing 1 post (of 1 total)
  • Author
    Posts
  • Avatar
    confuseis
    Participant
    #617873

    Hi

    We are using a Server 2008 R2 DFL

    I’m looking to detect “interactive” logins via a powershell script however I don’t see an interactive logon property on user accounts.

    I have searched online and see a group policy to show interactive logon messages but didn’t see clearly how to enable interactive login auditing of user accounts.

    From what I can gather id set a policy on domain controllers telling them to record interactive logins and thereafter I can use power shell to fetch this information.

    I cant seem to find the specific steps to toggle the auditing of interactive logins to on within group policy.

    Am I on the right track ?

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.