Guys I was dying trying to find something that could let me take the details of the XML data of a specific event so I could then use it to, say, send an email with just that data. Here's how to do that: Here's all the code right away: # Get the event you want and then format that event in XML Format $event = Get-WinEvent -MaxEvents 1 -FilterHashtable @{logname="Security"; id=5379} $event = [xml]$event.ToXml() # Drill down into the XML. In this example we're getting Event > EventData … [Read more...] about PowerShell – Parsing and creating variables from Events in Event Logs using XML
Event Logs
Enabling Event Log ID 4740 – A User Account Was Locked Out
There are certain really helpful Event Logs that just aren't enabled by default. This KB will show you how to enable the Event Log ID 4740, which will really help with proactively managing accounts that belong to users who are having trouble with their passwords, getting locked out while trying to connect to a resource remotely, or an account just getting maliciously hammered and locked out because your policies in place are stopping them. You have Password Policies in place to lock out users … [Read more...] about Enabling Event Log ID 4740 – A User Account Was Locked Out
Recent Activity