Get-Ual Daily Device Access

Module:
useraccesslogging
Gets UAL records of client requests per device for each day.

Syntax 

Get-UalDailyDeviceAccess
   [-ProductName <String[]>]
   [-RoleName <String[]>]
   [-RoleGuid <String[]>]
   [-IPAddress <String[]>]
   [-AccessDate <DateTime[]>]
   [-AccessCount <UInt32[]>]
   [-CimSession <CimSession[]>]
   [-ThrottleLimit <Int32>]
   [-AsJob]
   [<CommonParameters>]

Description

The Get-UalDailyDeviceAccess cmdlet gets User Access Logging (UAL) records for client requests by device for services on a server. Use the CimSession parameter to run the cmdlet on a remote server.

This cmdlet organizes information by device for each day. For each device that accesses a service, the cmdlet returns a record that specifies the IP address of the device, the server role that the client requested, and the name of the server product. The record also includes the date that the user accessed the service and how many times the user accessed the service during that day.

You can specify parameter values to narrow the records that this cmdlet returns. For instance, you can get records for only a specified IP address or role.

For more information about UAL, see the User Access Logging Overview topic in the TechNet library at http://technet.microsoft.com/library/hh849634.aspx .

Examples

Example 1: Get daily access information for a specific device 

PS C:\>Get-UalDailyDeviceAccess -IPAddress "10.17.44.6"
AccessCount    : 34

AccessDate     : 8/25/2012

IPAddress      : 10.17.44.6

ProductName    : Windows Server 2012 Datacenter

RoleGuid       : 10a9226f-50ee-49d8-a393-9a501d47ce04

RoleName       : File Server

PSComputerName : 


AccessCount    : 11

AccessDate     : 9/2/2012

IPAddress      : 10.17.44.6

ProductName    : Windows Server 2012 Datacenter

RoleGuid       : 10a9226f-50ee-49d8-a393-9a501d47ce04

RoleName       : File Server

PSComputerName :

This command gets the UAL records for a client with the specified IP address. The results show access requests on sample dates 8/25/2012 and 9/2/2012.

Optional Parameters

-AccessCount

Specifies an array of the number of access requests by a client during a single day.

Type: UInt32[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-AccessDate

Specifies an array of dates, as DateTime objects. A client can make one or more access requests per date.

Type: DateTime[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-AsJob

Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.

Type: SwitchParameter
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-CimSession

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.

Type: CimSession[]
Aliases: Session
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-IPAddress

Specifies an array of IP addresses for clients that request a service.

Type: String[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-ProductName

Specifies the name of a product. The installed role or specific product in the request is a component of this product.

Type: String[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-RoleGuid

Specifies an array of GUIDs for roles that clients access.

Type: String[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-RoleName

Specifies an array of names for roles that clients access.

Type: String[]
Position: Named
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False
-ThrottleLimit

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Type: Int32
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False