PapaTramp/RDP-login-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: qwinsta username fallback when RCM 1149 user empty (2.1.14-SAC)

Browse Source 
On some Win10 Pro hosts EventLog 1149 has blank Param1/Param2; resolve the sole RDP session user from qwinsta before emitting Sac/notify events.
This commit is contained in:
PTah
2026-07-14 10:45:56 +10:00
parent a746a82f2a
commit f7b3597206
4 changed files with 83 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -1,6 +1,6 @@
# RDP Login Monitor
**Версия:** `2.1.11-SAC` (`$ScriptVersion` + `version.txt`)
**Версия:** `2.1.14-SAC` (`$ScriptVersion` + `version.txt`)
PowerShell-мониторинг Windows: RDP/RDS, RD Gateway, WinRM, admin share, блокировки УЗ, heartbeat, отчёты.