---

$dc = "ИМЯ_DC"   # узнай через nltest /dsgetdc:$env:USERDNSDOMAIN
$cred = Get-Credential   # введи Adm / 777

Invoke-Command -ComputerName $dc -Credential $cred -ScriptBlock {
    # Тут твои команды
    Get-WinEvent -FilterHashtable @{
        LogName   = 'Security'
        StartTime = (Get-Date "2026-09-24 17:00:00")
        EndTime   = (Get-Date "2026-09-24 18:00:00")
        ID        = 4624,5140,5145,4688
    } | Select TimeCreated, Id, Message
}