Simple (better) local check; Monitor windows event logs\ID's

[Davejosh21]

Thanks, I will try it.