Only Get-Winevent Security log on Domain Controllers Fails
folks,
one of accounts called remoteevent part "event log readers" , has "manage auditing , security log" rights.
i can use eventvwr , connect domain controllers events including security log. works fine.
however, get-winevent, cannot connect security log. application, system connect fine. missing?
i following error:-
ps c:\windows\system32> get-winevent -listlog security -computername pdc
get-winevent : not retrieve information security log. error: attempted perform unauthorized
operation..
@ line:1 char:1
+ get-winevent -listlog security -computername pdc
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ categoryinfo : notspecified: (:) [get-winevent], exception
+ fullyqualifiederrorid : loginfounavailable,microsoft.powershell.commands.getwineventcommand
get-winevent : there not event log on pdc computer matches "security".
@ line:1 char:1
+ get-winevent -listlog security -computername pdc
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ categoryinfo : objectnotfound: (:) [get-winevent], exception
+ fullyqualifiederrorid : nomatchinglogsfound,microsoft.powershell.commands.getwineventcommand
regards, vik singh "if thread answered question, please click on "mark answer"
maybe thread: permissions on registry
https://social.technet.microsoft.com/forums/office/en-us/b72162d1-2c86-4d1a-9727-ec7269814cc4/getwinevent-with-nonadministrative-user?forum=winserverpowershell
Windows Server > Windows PowerShell
Comments
Post a Comment