How to unload all Windows logins for a specific user from AD?

Question

Active Directory

Good afternoon!
Is it possible using a script or program to unload from AD a list of successful logins to the system for a specific user?
Maybe there is some simple software that allows you to make a report?

Answer 1

man for the Get-EventLog cmdlet, Luke. Here, for example, is an article on how to work with Windows logs from powershell: windowsitpro.com/powershell/access-security-event-...
Well, auditing of security events must first be enabled, of course.

Answer 2

There are already ready scripts. Look for LastLogonActivity.ps1, handy reports in text or html format.
I use it myself with a few modifications.
The only condition is that you need to look at the logs on the machine where the user logged in: if this is a remote desktop server, then there is a separate log on it. If it's just a server, then logins should be viewed on the main and all backup DCs configured for this server. It just so happens that the login information is stored where it was requested.
PS https://gallery.technet.microsoft.com/scriptcenter... - somewhere on this resource.