Powershell or Vbscript needed to gather logon/ logoff event logs of certain users in AD.


  • I was wondering if a powershell or VBscript can be created to get the following from event viewer security logs. This will be in a Active Directory enviroment using 2008 R2 Domain Controllers and it will only be for specific users. The events would need to be narrowed Paticularly by username if possible. The script would be ran daily.

    Logon information: time range between 0630 & 0930

    Logoff information: time range  between 1500 & 1800

    Thursday, June 07, 2012 11:05 PM