Windows 10 If we know the AD account name and know that it last logged on/authenticated on 21st Aug, is there some PowerShell out there that can tell us which co

[GCJ Admin]

Apologies if this is on the wrong group, please point me in the right direction if it isn't. So I've come across a Domain Admin account which I thought was dormant until I ran the PS command Get-ADUser -identity <adminaccount> -properties * and found that the last logon date was 21/Aug/2022 18:15:31.Is there some PowerShell that can tell me which computer requested this logon/authentication for this account?

Continue reading...