Tracking User Lock, Unlock, and Sleep Events with PowerShell
A user reports their workstation keeps going to sleep “on its own.” Or someone claims they never left their desk, yet the session clearly disconnected. Answering these questions means digging through the Windows event log and correlating events across Security and System logs into one timeline. This script pulls seven distinct event IDs from two […]
Tracking User Lock, Unlock, and Sleep Events with PowerShell Read More »






