"

AAL test

Last review: Jun 06, 2013
https://kb.netwrix.com/169
Copy Article URL Copied

If you have already configured Administrator Audit Logging on your Exchange Server and still recieve the following in the Netwrix Auditor change reports:

"Administrator Audit Logging is not configured for the %Organization name% Exchange organization. Adjust the Administrator Audit Logging settings using the Active Directory Audit Configuration wizard, or manually as described in the Netwrix Auditor Installation and Configuration Guide:
http://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf

Please perform the following test steps on the Netwrix host server using PowerShell:

  1. Create remote session: $ExSession = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri ‘http://%your exchange 2010 server FQDN%/PowerShell/’
  2. Check the session status: $ExSession
  3. Try to read AdminAuditLog: Invoke-Command -Session $Exsession -scriptBlock {Get-AdminAuditLogConfig }

If the session has been successfully created (steps 1 and 2 were successful), but step 3 returns an error, please try to check the AdminAuditLog content manually using the following cmdlet: Get-AdminAuditLogConfig.

If you get the following error:

PS C:Users%username%> Invoke-Command -Session $Exsession -scriptBlock {$AALC
onfig = Get-AdminAuditLogConfig }
The term 'Get-AdminAuditLogConfig' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (Get-AdminAuditLogConfig:String)
[], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

This error means that there is not enough rights to run this cmdlet: please check the service account rights assignment.
 

Go Up