2023-10-21T22:57:08.4089431
DOMÄNE\Benutzer
\Mailbenachrichtigung bei RDP Anmeldung (AD Version)
true
<QueryList><Query Id="0" Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"><Select Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational">*[System[Provider[@Name='Microsoft-Windows-TerminalServices-RemoteConnectionManager'] and EventID=1149]]</Select></Query></QueryList>
S-1-5-21-4271144609-1190022086-4074699661-2633
Password
LeastPrivilege
IgnoreNew
false
true
true
false
false
true
false
true
true
false
false
false
true
false
PT72H
7
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
-command "C:\scripts\rdp-access-mail-notification.v3.ad.ps1"