Detect interactive login's

[confuseis]

#617873

Hi

We are using a Server 2008 R2 DFL

I’m looking to detect “interactive” logins via a powershell script however I don’t see an interactive logon property on user accounts.

I have searched online and see a group policy to show interactive logon messages but didn’t see clearly how to enable interactive login auditing of user accounts.

From what I can gather id set a policy on domain controllers telling them to record interactive logins and thereafter I can use power shell to fetch this information.

I cant seem to find the specific steps to toggle the auditing of interactive logins to on within group policy.

Am I on the right track ?

[Author]

Posts