ScheduledTaskGPO.xml

<?xml version="1.0" encoding="UTF-8"?>
<TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" name="Super Scripteroni" image="2" changed="2019-06-15 12:30:24" uid="{97F34702-448A-49E3-B7E0-634C10F83A1B}" userContext="0" removePolicy="0">
   <Properties action="U" name="Super Scripteroni" runAs="NT AUTHORITY\System" logonType="S4U">
      <Task version="1.3">
         <RegistrationInfo>
            <Author>BELOWAVERAGE\dylan.bickerstaff</Author>
            <Description />
         </RegistrationInfo>
         <Principals>
            <Principal id="Author">
               <UserId>NT AUTHORITY\System</UserId>
               <LogonType>S4U</LogonType>
               <RunLevel>HighestAvailable</RunLevel>
            </Principal>
         </Principals>
         <Settings>
            <IdleSettings>
               <Duration>PT5M</Duration>
               <WaitTimeout>PT1H</WaitTimeout>
               <StopOnIdleEnd>false</StopOnIdleEnd>
               <RestartOnIdle>false</RestartOnIdle>
            </IdleSettings>
            <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
            <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
            <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
            <AllowHardTerminate>true</AllowHardTerminate>
            <AllowStartOnDemand>true</AllowStartOnDemand>
            <Enabled>true</Enabled>
            <Hidden>false</Hidden>
            <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
            <Priority>7</Priority>
            <StartWhenAvailable>true</StartWhenAvailable>
         </Settings>
         <Triggers>
            <EventTrigger>
               <Enabled>true</Enabled>
               <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="System"&gt;&lt;Select Path="System"&gt;*[System[Provider[@Name='Microsoft-Windows-GroupPolicy'] and EventID=1502]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
            </EventTrigger>
            <EventTrigger>
               <Enabled>true</Enabled>
               <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="System"&gt;&lt;Select Path="System"&gt;*[System[Provider[@Name='Microsoft-Windows-GroupPolicy'] and EventID=1500]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
            </EventTrigger>
         </Triggers>
         <Actions Context="Author">
            <Exec>
               <Command>powershell.exe</Command>
               <Arguments>-ExecutionPolicy Bypass -File "C:\BELOWAVERAGE\SOFTWARE\SuperScripteroni.ps1"</Arguments>
            </Exec>
         </Actions>
      </Task>
   </Properties>
</TaskV2>