Du kannst die Lognachrichten des User Profile Service durchsuchen.
Get-WinEvent -FilterHashtable @{LogName='Microsoft-Windows-User Profile Service/Operational'; ID=67} | Select-Object TimeCreated, Message | Format-List *