import os
from subprocess import Popen,PIPE
import sys
def alert(arg):
    sys.stderr.write("%d%d%d" % (arg, arg, arg))
obj=Popen(["powershell","Get-EventLog -LogName Security -InstanceID 4720 -Newest 1"],shell=True,stdout=PIPE,stderr=PIPE)
r,e=obj.communicate()
if e:
    print "Error:\n"
    print e
elif r:
    if "No matches found" in r:
        alert(0)
    else:
        alert(1)
else:
    alert(0)