PowerShell

set execution policy : https://technet.microsoft.com/en-us/library/hh849812.aspx

parse security logs, get client ip : https://gallery.technet.microsoft.com/scriptcenter/Collect-RDP-logon-entries-dc3e19d0