AAL test

Active Directory
Exchange
6.5 and older
7.0-8.5
9.0-9.7
9.8
https://kb.netwrix.com/169
Copy Article URL Copied

You have already configured Administrator Audit Logging on your Exchange Server but still recieve the following error in the Netwrix Auditor change reports:

Administrator Audit Logging is not configured for the %Organization name% Exchange organization…

Please perform the following test steps on the Netwrix host server using PowerShell:

  1. Create remote session: $ExSession = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri http://%your exchange 2010 server FQDN%/PowerShell/
  2. Check the session status: $ExSession
  3. Try to read AdminAuditLog: Invoke-Command -Session $Exsession -scriptBlock {Get-AdminAuditLogConfig }

If the session has been successfully created (steps 1 and 2 were successful), but step 3 returns an error, please try to check the AdminAuditLog content manually using the following cmdlet: Get-AdminAuditLogConfig.

If you get the following error:

PS C:Users%username%> Invoke-Command -Session $Exsession -scriptBlock {$AALC
onfig = Get-AdminAuditLogConfig }
The term ‘Get-AdminAuditLogConfig’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (Get-AdminAuditLogConfig:String)
[], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

This error means that there is not enough rights to run this cmdlet: please check the service account rights assignment.

Go Up