Event Viewer is a component of Microsoft’s Windows NT operating system that lets administrators and users view the event logs on a local or remote machine.
NTLM still appears inside many Active Directory environments. Even when Kerberos handles normal authentication, NTLM often surfaces through legacy applications, services, or fallback behavior. Before blocking anything, visibility matters. The safest place to monitor NTLM usage is the domain controller. Read More …
Workstations play a crucial role in many professional environments, providing essential computing power for businesses and individuals alike. However, intermittent power disruptions, such as loadshedding, can create startup issues and hinder productivity. In this article, we will explore the problem Read More …
So I am working on a project to get all the LogOn \ LogOff events for a specific user on a Terminal Server. When I did few online searches there was some indication of how to get this done with PowerShell. But this did Read More …