Event Log Query String for Interactive LogonType *[System[(EventID=4624)]] and *[EventData[Data[@Name='LogonType'] and (Data=2)]] July 13, 2022 it_crumb_admin Uncategorized « Powershell for various AD user info Add Printer Management back to Windows »