Tag: Windows Server

Active Directory Query for Logins by Username

Apr 28, 2015

—

by

in Security, Windows

1. In the Event Viewer / Security Log and click Filter Current Log in the action pane. 2. Switch over to the XML tab and tick the Edit Query Manually box. Press Yes when prompted. 3. Edit the XML query as needed. Modify the AccountName to suit your needs. * [EventData[Data[@Name=’subjectUsername’]=’AccountName’]]