Get-UalDeviceAccess

Gets UAL records of client request per device.

Syntax

Get-UalDeviceAccess
   [-ProductName <String[]>]
   [-RoleName <String[]>]
   [-RoleGuid <String[]>]
   [-TenantIdentifier <String[]>]
   [-IPAddress <String[]>]
   [-ActivityCount <UInt32[]>]
   [-FirstSeen <DateTime[]>]
   [-LastSeen <DateTime[]>]
   [-CimSession <CimSession[]>]
   [-ThrottleLimit <Int32>]
   [-AsJob]
   [<CommonParameters>]

Description

The Get-UalDeviceAccess cmdlet gets User Access Logging (UAL) records for client requests, by device, for services on a server. Use the CimSession parameter to run the cmdlet on a remote server.

This cmdlet organizes information by device. For each device that accesses a service on a server, the cmdlet returns a record that specifies IP address of the device, the server role that the client requested, and the name of the server product. If the service uses a tenant client, the record includes a tenant identifier. The record also includes the first time the client accessed the service, the most recent time the client accessed the service, and the total number of times the client accessed the service.

You can specify parameter values to narrow the records that this cmdlet returns. For instance, you can get records for only a specified IP address or role.

For more information about UAL, see the User Access Logging Overview topic in the TechNet library at http://technet.microsoft.com/library/hh849634.aspx.

Examples

Example 1: Get access information for a specified device

PS C:\>Get-UalDeviceAccess -IPAddress "10.17.44.6"
ActivityCount    : 45

FirstSeen        : 8/25/2012 4:37:23 PM

IPAddress        : 10.17.44.6

LastSeen         : 9/1/2012 9:30:09 PM

ProductName      : Windows Server 2012 Datacenter

RoleGuid         : 10a9226f-50ee-49d8-a393-9a501d47ce04

RoleName         : File Server

TenantIdentifier : 00000000-0000-0000-0000-000000000000

PSComputerName   :

This command gets UAL records for a client device with a specified IP address. The results show a single service that the devices accesses for the first time on 8/25/2012 and most recently on 9/1/2012.

Parameters

-ActivityCount

Specifies an array of the number of access requests by a client for a service.

Type:UInt32[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-AsJob

Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete.

Type:SwitchParameter
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-CimSession

Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.

Type:CimSession[]
Aliases:Session
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-FirstSeen

Specifies an array of dates, as DateTime objects. A time represents when the client accessed the service for the first time.

Type:DateTime[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-IPAddress

Specifies an array of IP addresses for client devices that request services.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-LastSeen

Specifies an array of dates, as DateTime objects. A time represents when the client accessed the service for the most recent time.

Type:DateTime[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ProductName

Specifies an array of names of products. The installed role or specific product in the request is a component of this product.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-RoleGuid

Specifies an array of GUIDs for roles that clients access.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-RoleName

Specifies an array of names for roles that clients access.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-TenantIdentifier

Specifies an array of GUIDs. Each GUID identifies a tenant client of an installed role or product, if a tenant client exists.

Type:String[]
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-ThrottleLimit

Specifies the maximum number of concurrent operations that can be established to run the cmdlet. If this parameter is omitted or a value of 0 is entered, then Windows PowerShell® calculates an optimum throttle limit for the cmdlet based on the number of CIM cmdlets that are running on the computer. The throttle limit applies only to the current cmdlet, not to the session or to the computer.

Type:Int32
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False