What would be good information to use in order to identify and report on times when the highest number of transient end-user systems such as laptops are connected to the network?
Available to me is event log information from the following systems: Domain Controllers and end-user systems.
I would like to make a data-informed decision on what maintenance window we should use for our patch management process.