A simple, quick, audit tool.   -Logged On Users -SystemInfo -IPconfig /All -Active Connections (Netstat) -Netstat Names -Privileged Users/Groups -Startup -Services -Processes+Svcs -Drivers (signed?) -Software -Powershell Commands -Logon Failures -All RDP Feel Free to Reply with More.   **Requires PowerShell v4.0 or higher to run some of the commands , but those can be converted to WMI without much effort.