I have a script that gets me just about all I need to know on USB devices attached to the system using Get-PNPDevice and Get-PNPDeviceProperty. What I cant seem to find is the User that plugged in that device. Google yielded no results, at least not that I found. I am only able to correlate the times obtained from these cmdlets with user login info for one week as the logs are cleared and archived weekly, which is better then nothing, however, some of the times returned on some systems are months ago.
Is there some back door trick or C# code I can leverage to find out what user plugged in the device? I am only gathering USB Disk/Mass Storage info, dont care about anything else.
Thanks in advance for any help you can provide.