Get AD logon history for specific AD user account

%3CLINGO-SUB%20id%3D%22lingo-sub-1347927%22%20slang%3D%22en-US%22%3EGet%20AD%20logon%20history%20for%20specific%20AD%20user%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1347927%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20looking%20for%20a%20Powershell%20script%20that%20can%20list%20the%20logon%20history%20for%20a%20specific%20user.%20I%20have%20searched%20all%20over%20and%20everything%20I%20am%20finding%20is%20getting%20a%20report%20for%20ALL%20AD%20users%20logon%20history.%20What%20I%20need%20is%20to%20specify%20by%20username%20all%20logon%20attempts%20within%20a%20specific%20time%20frame.%20Any%20help%20is%20GREATLY%20appreciated!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1347927%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPowerShell%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1348270%22%20slang%3D%22en-US%22%3ERe%3A%20Get%20AD%20logon%20history%20for%20specific%20AD%20user%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1348270%22%20slang%3D%22en-US%22%3E%3CP%3EHere%20you%20go.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fgallery.technet.microsoft.com%2Fscriptcenter%2FGet-All-AD-Users-Logon-9e721a89%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fgallery.technet.microsoft.com%2Fscriptcenter%2FGet-All-AD-Users-Logon-9e721a89%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1348619%22%20slang%3D%22en-US%22%3ERe%3A%20Get%20AD%20logon%20history%20for%20specific%20AD%20user%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1348619%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%20for%20the%20response%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3Bbut%20this%20is%20one%20of%20the%20articles%20I%20found%20while%20searching%20for%20a%20solution%20except%20the%20script%20in%20the%20link%20grabs%20ALL%20AD%20users%20and%20what%20I%20am%20looking%20to%20do%20is%20get%20the%20same%20or%20similar%20results%20for%20a%20single%20AD%20user%20account%20instead%20off%20every%20user%20account%20in%20AD.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1348641%22%20slang%3D%22en-US%22%3ERe%3A%20Get%20AD%20logon%20history%20for%20specific%20AD%20user%20account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1348641%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20filter%20the%20results%20or%20possibly%20modify%20the%20script%20to%20suit%20your%20needs.%20If%20you%20need%20help%20with%20scripting%20I'd%20suggest%20reaching%20out%20to%20subject%20matter%20experts%20here%20in%20dedicated%20forum.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2Fhome%3Fforum%3Dwinserverpowershell%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3Ehttps%3A%2F%2Fsocial.technet.microsoft.com%2FForums%2Fen-US%2Fhome%3Fforum%3Dwinserverpowershell%3C%2FFONT%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20style%3D%22background-color%3A%20%23ffffff%3B%22%3E%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Contributor

I am looking for a Powershell script that can list the logon history for a specific user. I have searched all over and everything I am finding is getting a report for ALL AD users logon history. What I need is to specify by username all logon attempts within a specific time frame. Any help is GREATLY appreciated!!

3 Replies
Highlighted

Thanks for the response @Dave Patrick but this is one of the articles I found while searching for a solution except the script in the link grabs ALL AD users and what I am looking to do is get the same or similar results for a single AD user account instead off every user account in AD.

Highlighted

You can filter the results or possibly modify the script to suit your needs. If you need help with scripting I'd suggest reaching out to subject matter experts here in dedicated forum.

 

https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverpowershell