2023-10-21T22:57:08.4089431 Benutzer \Mailbenachrichtigung bei RDP Anmeldung (Local Version) true <QueryList><Query Id="0" Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"><Select Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational">*[System[Provider[@Name='Microsoft-Windows-TerminalServices-RemoteConnectionManager'] and EventID=1149]]</Select></Query></QueryList> S-1-5-18 LeastPrivilege IgnoreNew false true true false false true false true true false false false true false PT72H 7 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -command "C:\scripts\rdp-access-mail-notification.v3.local.ps1"