How to generate and export the last logged on users on remote computers report

Steps to obtain the last logged on users on remote computers using PowerShell:

• Identify the domain from which you want to retrieve the report.
• Identify the LDAP attributes you need to fetch the report.
• Identify the primary DC to retrieve the report.
• Compile the script.
• Execute it in Windows PowerShell.
• The report will be exported in the given format.
• To obtain the report in a different format, modify the script accordingly.

Sample Windows PowerShell script

Get-WinEvent -Computer $serverName -FilterHashtable @{Logname='Security';ID=4672} -MaxEvents 1 | Select @{N='User';E={$_.Properties[1].Value}},TimeCreated

To obtain the report,

• Login to ADAudit Plus web console as an administrator.
• Navigate to the Reports tab and from the Local Logon-Logoff section in the left pane, select Remote Desktop Services Activity report.
• Select the domain and click Generate.
• Select Export As to export the report in any of the preferred formats (CSV, PDF, HTML, CSVDE and XLSX).

Screenshot: