Files
Intune/intune/Externally Sourced Remediations/Reporting/Get-UserActivityReport/Detect-UserActivityReport.ps1
2025-05-19 15:19:36 -04:00

13 lines
364 B
PowerShell

# Check user login times
$userLogins = Get-EventLog -LogName Security -InstanceId 4624 | Select-Object TimeGenerated, ReplacementStrings
# Output the user login times
# Write-Output $userLogins
$csvPath = "C:\temp\UserLoginsStatus.csv"
$userLogins | Export-Csv -Path $csvPath -NoTypeInformation
Write-Output "User Logins status exported to $csvPath"
Exit 0