fix: qwinsta username fallback when RCM 1149 user empty (2.1.14-SAC)
On some Win10 Pro hosts EventLog 1149 has blank Param1/Param2; resolve the sole RDP session user from qwinsta before emitting Sac/notify events.
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
# RDP Login Monitor
|
||||
|
||||
**Version:** `2.1.11-SAC` (`$ScriptVersion` + `version.txt`)
|
||||
**Version:** `2.1.14-SAC` (`$ScriptVersion` + `version.txt`)
|
||||
|
||||
PowerShell toolkit for monitoring Windows logons with Telegram and/or Email (SMTP) notifications.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user