So, we have Powershell Universal and we have a dashboard. We run universal as a service on a Windows server, with login from AD.
My question is can we check who was online on that time?
We do have the logs from Universal. Where can we look besides the logs? The logs just gives us session id’s.
Thanks.
Product: PowerShell Universal
Version: 1.4.6
I’m not sure if this helps you responding to something that’s already happened, but in our roles.ps1 we added a line to log logins
"$(Get-Date -Format 'yyyyMMdd_HHmmss')|$UserName|Admin:$IsMember" | out-file "C:\ProgramData\PowerShellUniversal\latestLogin.txt" -append -force
$IsMember is whether or not the user was detected as being in the Admin group