pdqcom / PowerShell-Scanners

A community repository of PowerShell Scanners for PDQ Inventory.
MIT License
182 stars 74 forks source link

User Last Logged On not reporting cached logon types #105

Closed CaseyM-PDQ closed 1 year ago

CaseyM-PDQ commented 1 year ago

Had a customer report that the scanner wasn't working.

Upon further research Sid and I found that my laptop would not return anything, but the lap computers would. Digging deeper, we found that the logon type 11 (cached logon) was not filtered out.

Where I am not on the physical network, by logons will almost always be cached logons. LogonType 11 should be accounted for with the scanner.

Attached proposed fix UserLastLoggedOn(Fixed).txt