I have been asked to create a report that gives us the following data in a SCOM report and export to .csv:

  • Timestamp
  • Workstation
  • Account Name
  • Status and Sub Status Codes

I know I'll have to work with Security Log Event ID 4625. We have multiple DC's. The main issue is I have no idea where to get the Workstation from...

Anyone have a idea?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.