2023-10-21T22:57:08.4089431
Benutzer
\Mailbenachrichtigung bei RDP Anmeldung (Local Version)
true
<QueryList><Query Id="0" Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational"><Select Path="Microsoft-Windows-TerminalServices-RemoteConnectionManager/Operational">*[System[Provider[@Name='Microsoft-Windows-TerminalServices-RemoteConnectionManager'] and EventID=1149]]</Select></Query></QueryList>
S-1-5-18
LeastPrivilege
IgnoreNew
false
true
true
false
false
true
false
true
true
false
false
false
true
false
PT72H
7
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
-command "C:\scripts\rdp-access-mail-notification.v3.local.ps1"