PowerShell Logo Small


This is the built-in help made by Microsoft for the command 'Get-UalServerUser', in PowerShell version 5 - as retrieved from Windows version 'Microsoft Windows Server 2012 R2 Standard' PowerShell help files on 2016-06-23.

For PowerShell version 3 and up, where you have Update-Help, this command was run just before creating the web pages from the help files.


Gets UAL records for a server per user.


Get-UalServerUser [-ActivityCount <UInt32[]>] [-AsJob] [-ChassisSerialNumber <String[]>] [-CimSession <CimSession[]>] [-FirstSeen <DateTime[]>] [-LastSeen <DateTime[]>]
[-ThrottleLimit <Int32>] [-Username <String[]>] [-UUID <String[]>] [<CommonParameters>]

Search powershellhelp.space


The Get-UalServerUser cmdlet gets User Access Logging (UAL) records for client requests, by user, for services on a server. Use the CimSession parameter to run the cmdlet on
a remote server.

This cmdlet organizes information by user. For each user that accesses a service on a server, the cmdlet returns a record that specifies the user, the chassis serial number
for the server, and Universally Unique Identifier (UUID) for the server. The record also includes the first time the client accessed the service, the most recent time the
client accessed the service, and the total number of times the client accessed the service.

You can specify parameter values to narrow the records that this cmdlet returns. For instance, you can get records for only a specified user.

For more information about UAL, see the User Access Logging Overview topic in the TechNet library at http://technet.microsoft.com/library/hh849634.aspx.



Online Version: http://go.microsoft.com/fwlink/p/?linkid=287597




Example 1: Get access records for a specified user

PS C:\>Get-UalServerUser -Username "western\sarahjones"
ActivityCount : 1

ChassisSerialNumber : 4550-1195-7960-9223-8899-0403-95

FirstSeen : 8/17/2012 12:37:30 PM

LastSeen : 8/17/2012 12:37:30 PM

UserName : western\sarahjones

UUID : A9258570-6931-405C-8DB5-1A351A82B278

PSComputerName :

This command gets the UAL records for a server for a client with a specified user name. The results show this client accessed a service on this server only once on 8/17/2012.