Would you like to learn how to audit successful logon events using Powershell? In this tutorial, we are going to show you how to use Powershell to find login events on the Event viewer using the command line on a computer running Windows.
• Windows 2016
• Windows 2019
• Windows 10
Equipment list
Here you can find the list of equipment used to create this tutorial.
This link will also show the software list used to create this tutorial.
Related tutorial – PowerShell
On this page, we offer quick access to a list of tutorials related to PowerShell.
Powershell – Audit successful logon events
As an Administrator, start a new POWERSHELL command-line prompt.
Audit successful login events.
Here is the command output.
Audit successful login events recently created.
In our example, we filtered the successful logon events from the last 10 days.
Audit successful login events on a specific date.
Audit successful login events on a date range.
Display details from successful login event.
Congratulations! You are able to search successful logins on the event viewer using PowerShell.
