CODEWITHSUNDEEP
powershell
NuwlyITed
NuwlyITed

Reputation: 21

Checking which user/samaccountname was logged last on one or list of computers

Can I somehow check which user/samaccountname was last logged on a list of PCs, if I have the PC names from AD?

I tried:

$TargetName = “W7XXXXXXXXXX”
$RC = Get-WinEvent -Computer 
$TargetName -FilterHashtable @{ Logname = ‘Security’; ID = 4672 } -MaxEvents 1 | Select @{ N = ‘User’; E = { $_.Properties[1].Value } }, TimeCreated$RC.Username$RC.TimeCreated

Error is Unexpected token -FilterHashtable

Upvotes: 0

Views: 203

Answers (1)

Mike Kennedy
Mike Kennedy

Reputation: 394

This needs to be on one Line:

$RC = Get-WinEvent -ComputerName $TargetName -FilterHashtable @{ Logname = ‘Security’; ID = 4672 } -MaxEvents 1 | Select @{ N = ‘User’; E = { $_.Properties[1].Value } }, TimeCreated$RC.Username$RC.TimeCreated

or add " ` "

$TargetName = "sql01"
$RC = Get-WinEvent -ComputerName `
$TargetName -FilterHashtable @{ Logname = ‘Security’; ID = 4672 } -MaxEvents 1 | Select @{ N = ‘User’; E = { $_.Properties[1].Value } }, TimeCreated$RC.Username$RC.TimeCreated

Upvotes: 1

Related Questions