Problem Endlich Feierabend … und am nächsten Tag die Frage wie lange war ich wieder mit dem Thema beschäftigt?

Lösung: Das Windows Eventlog auswerten

was:

• https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/audit-other-logonlogoff-events
• https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4801

Vorbereitung Event aktiveren!

In der Powershell in einer administrativen Session:

Get-EventLog -LogName Security  -InstanceId 4801
Get-EventLog -LogName Security  -InstanceId 4800

---

• https://devblogs.microsoft.com/scripting/how-can-i-log-the-start-time-and-the-end-time-of-the-screensaver/
• https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/get-eventlog?view=powershell-5.1
• https://www.liquidweb.com/kb/where-are-the-windows-logs-stored/
• https://community.spiceworks.com/topic/1421021-where-does-event-id-4800-and-4801-get-logged-to-local-machine-or-ad
• https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4802