AAL test

Active Directory
6.5 and older
Copy Article URL Copied

You have already configured Administrator Audit Logging on your Exchange Server but still recieve the following error in the Netwrix Auditor change reports:

Administrator Audit Logging is not configured for the %Organization name% Exchange organization…

Please perform the following test steps on the Netwrix host server using PowerShell:

  1. Create remote session: $ExSession = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri http://%your exchange 2010 server FQDN%/PowerShell/
  2. Check the session status: $ExSession
  3. Try to read AdminAuditLog: Invoke-Command -Session $Exsession -scriptBlock {Get-AdminAuditLogConfig }

If the session has been successfully created (steps 1 and 2 were successful), but step 3 returns an error, please try to check the AdminAuditLog content manually using the following cmdlet: Get-AdminAuditLogConfig.

If you get the following error:

PS C:Users%username%> Invoke-Command -Session $Exsession -scriptBlock {$AALC
onfig = Get-AdminAuditLogConfig }
The term ‘Get-AdminAuditLogConfig’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (Get-AdminAuditLogConfig:String)
[], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

This error means that there is not enough rights to run this cmdlet: please check the service account rights assignment.

Go Up