Hello,
First off a huge thank you to everyone on this site that spends their spare time helping out. You are all the real MVPs.
I have been working on a project and I need to query the event log of all the computers in my domain and output a list of the computer names and times that someone logged in with a specific local admin account. We are enforcing smartcard logins and need to know how often local admin accounts are needed to perform maintenance.
I have fiddled with both Get-Event and Get-WinEvent but just cannot seem to set the right parameters to obtain the information. If anyone could provide some good pointers I would greatly appreciate it. Cheers.