how to setup a powershell code

Then how come it shows 700 logons and its just not fully accurate or something!??

Also every time i open PowerShell backup i have to input that full code again? is there a way to make by default I give a certain keyword and in its memory it will know what to do and give me that full thing like this pic

Hello @mordy kurlander

Yes, absolutely. The picture you're showing is basically a system summary/dashboard printed in the PowerShell window. We can make your script look much closer to that while still keeping the 24-hour activity information we discussed earlier.

Here's a simple version to start with:

function Give-Log {
    param(
        [int]$Hours = 24
    )
    $StartTime = (Get-Date).AddHours(-$Hours)
    # Basic system information
    $OS = Get-CimInstance Win32_OperatingSystem
    $Computer = Get-CimInstance Win32_ComputerSystem
    $CPU = Get-CimInstance Win32_Processor | Select-Object -First 1
    $Uptime = (Get-Date) - $OS.LastBootUpTime
    $TotalRAM = [math]::Round($OS.TotalVisibleMemorySize / 1MB, 1)
    $FreeRAM  = [math]::Round($OS.FreePhysicalMemory / 1MB, 1)
    $UsedRAM  = [math]::Round($TotalRAM - $FreeRAM, 1)
    $Drive = Get-CimInstance Win32_LogicalDisk -Filter "DeviceID='C:'"
    $DiskUsed = [math]::Round(
        (($Drive.Size - $Drive.FreeSpace) / $Drive.Size) * 100, 1
    )
    # Count events during requested period
    $StartupEvents = @(
        Get-WinEvent -FilterHashtable @{
            LogName='System'
            Id=12,6005
            StartTime=$StartTime
        } -ErrorAction SilentlyContinue
    )
    $ShutdownEvents = @(
        Get-WinEvent -FilterHashtable @{
            LogName='System'
            Id=13,1074,6006,6008
            StartTime=$StartTime
        } -ErrorAction SilentlyContinue
    )
    $Logons = @(
        Get-WinEvent -FilterHashtable @{
            LogName='Security'
            Id=4624
            StartTime=$StartTime
        } -ErrorAction SilentlyContinue
    )
    Clear-Host
    Write-Host "============================================================" -ForegroundColor Cyan
    Write-Host "                 WINDOWS SYSTEM REPORT" -ForegroundColor Cyan
    Write-Host "============================================================" -ForegroundColor Cyan
    Write-Host ""
    Write-Host "System Information as of $(Get-Date)"
    Write-Host ""
    Write-Host (" Computer Name:        {0}" -f $env:COMPUTERNAME)
    Write-Host (" Windows:              {0}" -f $OS.Caption)
    Write-Host (" CPU:                  {0}" -f $CPU.Name)
    Write-Host (" Current User:         {0}" -f $env:USERNAME)
    Write-Host (" Uptime:               {0} days, {1} hours" -f $Uptime.Days,$Uptime.Hours)
    Write-Host (" Memory Used:          {0} GB / {1} GB" -f $UsedRAM,$TotalRAM)
    Write-Host (" C: Drive Used:        {0}%" -f $DiskUsed)
    Write-Host ""
    Write-Host "Activity during the last $Hours hours" -ForegroundColor Yellow
    Write-Host ""
    Write-Host (" Computer Startups:    {0}" -f $StartupEvents.Count)
    Write-Host (" Shutdown Events:      {0}" -f $ShutdownEvents.Count)
    Write-Host (" Successful Logons:    {0}" -f $Logons.Count)
    Write-Host ""
    Write-Host "============================================================" -ForegroundColor Cyan
}

After pasting that into PowerShell, you can simply type:

Give-Log

and it will show the summary for the last 24 hours.

If you want 48 hours:

Give-Log -Hours 48

or seven days:

Give-Log -Hours 168

The result will look roughly like:

PowerShell can retrieve this system information through CIM/WMI, including the logged-on user, OS information, and other computer details.

One small warning: 4624 counts successful logon events, not necessarily unique people physically signing into the desktop. Windows generates different logon types for interactive, network, service, and other sessions, so we can improve that part next if you specifically want “people who logged into the computer.”

Once you're happy with how this looks, the next step would be to save it as a .ps1 file and add the function to your PowerShell profile. Then Give-Log can become your permanent command, so whenever you open PowerShell you can just type Give-Log without pasting the script again.

We can also make the next version show CPU usage, IP address, failed logins, unexpected shutdowns, the actual usernames that logged in, and the exact startup/shutdown times while keeping this same clean layout. PowerShell's Get-Counter can also retrieve live Windows performance data if you want CPU statistics like the screenshot.

References:

Collecting information about computers with PowerShell

Get-Counter

Help make this community better for everyone: If this answer helped or resolved your issue, please accept it or upvote it. If not, share more details in a comment so we can continue the discussion and find the right solution. Thank you.

This is great but is there a way for it to be more similar to this picture!?