All selected work

Workplace pilot

Piloting a Windows sign-in audit

I tested a way to collect physical workstation sign-ins for authorised review, with a separate status report to show whether collection ran.

What changed

I used Group Policy to schedule a PowerShell collection task on Windows workstations. It was designed to report physical workstation sign-ins and write a separate collection status file.

What I checked

The first pilot could not write to the reporting folder. After correcting the test computer’s permissions, I confirmed that it produced both the sign-in CSV and the status CSV in the designated folder.

What I learned

Testing under the scheduled task’s own identity is essential. A manual run under my account would have missed the write-permission problem. The recorded result covers one pilot workstation.