Only Get-Winevent Security log on Domain Controllers Fails
folks,
one of accounts called remoteevent part "event log readers" , has "manage auditing , security log" rights.
i can use eventvwr , connect domain controllers events including security log. works fine.
  
however, get-winevent, cannot connect security log. application, system connect fine. missing?
i following error:-
ps c:\windows\system32> get-winevent -listlog security -computername pdc
  get-winevent : not retrieve information security log. error: attempted perform unauthorized
  operation..
  @ line:1 char:1
  + get-winevent -listlog security -computername pdc
  + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + categoryinfo          : notspecified: (:) [get-winevent], exception
      + fullyqualifiederrorid : loginfounavailable,microsoft.powershell.commands.getwineventcommand
  
  get-winevent : there not event log on pdc computer matches "security".
  @ line:1 char:1
  + get-winevent -listlog security -computername pdc
  + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      + categoryinfo          : objectnotfound: (:) [get-winevent], exception
      + fullyqualifiederrorid : nomatchinglogsfound,microsoft.powershell.commands.getwineventcommand
regards, vik singh "if thread answered question, please click on "mark answer"
maybe thread: permissions on registry
https://social.technet.microsoft.com/forums/office/en-us/b72162d1-2c86-4d1a-9727-ec7269814cc4/getwinevent-with-nonadministrative-user?forum=winserverpowershell
                                                                          Windows Server                                                     >                                                                 Windows PowerShell                                                                           
 
 
  
 
Comments
Post a Comment