# This script will generate SAMLogon's Status/User/Machine activties summary Excel sheet from netlogon.log(s) using LogParser and Excel via COM objects.
# 1. To enable Netlogon debug logging: run NLtest. Logging will start right after NLtest for later OS, only restart Netlogon service if debug info is not present.
# Nltest /DBFlag:2080FFFF
# 2. Output in: %windir%\debug\netlogon.log & netlogon.bak
# 3. To stop netlogon debug logging:
# Nltest /DBFlag:0
# 4. No need to delete Netlogon.* since OS continues log essential netlogon info.
# 5. More info https://docs.microsoft.com/en-us/troubleshoot/windows-client/windows-security/enable-debug-logging-netlogon-service
#
# LogParserWrapper_Netlogon.ps1 v0.92 4/24 (Merge sheets to one output file.)
# Steps:
# 1. Install LogParser 2.2 from https://www.microsoft.com/en-us/download/details.aspx?id=24659
# Info on LogParser2.2 https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-xp/bb878032(v=technet.10)
# 2. Copy Netlogon.log & Netlogon.bak from traget's %windir%\debug directory to same directory as this script.
# Note: Script will process all *.log & *.bak in script directory when run.
# 3. Run script (right click script, 'run with powershell')
#