2023-10-21T22:57:08.4089431 DOMÄNE\Benutzer \Mailbenachrichtigung bei RDP Anmeldung (AD Version) true <QueryList><Query Id="0" Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"><Select Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational">*[System[Provider[@Name='Microsoft-Windows-TerminalServices-RemoteConnectionManager'] and EventID=1149]]</Select></Query></QueryList> S-1-5-21-4271144609-1190022086-4074699661-2633 Password LeastPrivilege IgnoreNew false true true false false true false true true false false false true false PT72H 7 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command "C:\scripts\rdp-access-mail-notification.v3.ad.ps1"