Troubleshooting

1. How to verify if the desired events are getting logged?

Open the Event Viewer on a computer where PowerShell auditing has been configured. Navigate to the left panel, and click on Application and Service Logs > Microsoft > Windows > PowerShell > Operational. Verify if events 4103 and 4104 are getting logged.

我们的客户