Hi
Im trying to run reports on RDP connections to a server. If I run:
Wevtutil qe Microsoft-Windows-TerminalServices-LocalSessionManager/Operational /c:3 /rd:true /f:text
The console output is correct but if I pipe to a file
Wevtutil qe Microsoft-Windows-TerminalServices-LocalSessionManager/Operational /c:3 /rd:true >c:\temp\report.txt
The connection time shown in the txt file is 1 hour behind?
Server is in UK and set to UTC and we are currently on Daylight Saving Time.
Anyone got any suggestions?