Only Get-Winevent Security log on Domain Controllers Fails


folks,

one of accounts called remoteevent part "event log readers" , has "manage auditing , security log" rights.

i can use eventvwr , connect domain controllers events including security log. works fine.

however, get-winevent, cannot connect security log. application, system connect fine. missing?

i following error:-

ps c:\windows\system32> get-winevent -listlog security -computername pdc
get-winevent : not retrieve information security log. error: attempted perform unauthorized
operation..
@ line:1 char:1
+ get-winevent -listlog security -computername pdc
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + categoryinfo          : notspecified: (:) [get-winevent], exception
    + fullyqualifiederrorid : loginfounavailable,microsoft.powershell.commands.getwineventcommand

get-winevent : there not event log on pdc computer matches "security".
@ line:1 char:1
+ get-winevent -listlog security -computername pdc
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + categoryinfo          : objectnotfound: (:) [get-winevent], exception
    + fullyqualifiederrorid : nomatchinglogsfound,microsoft.powershell.commands.getwineventcommand


regards, vik singh "if thread answered question, please click on "mark answer"

maybe thread:  permissions on registry

https://social.technet.microsoft.com/forums/office/en-us/b72162d1-2c86-4d1a-9727-ec7269814cc4/getwinevent-with-nonadministrative-user?forum=winserverpowershell



Windows Server  >  Windows PowerShell



Comments

Popular posts from this blog

CRL Revocation always failed

0x300000d errors in Microsoft Remote Desktop client

Failed to query the results of bpa xpath