How to verify if the desired events are getting logged?
Open the Event Viewer on a computer where PowerShell auditing has been configured. Navigate to the left panel, and click on Application and Service Logs > Microsoft > Windows > PowerShell > Operational. Verify if events 4103 and 4104 are getting logged.
Don't see what you're looking for?
Visit our community
Post your questions in the forum.
Request additional resources
Send us your requirements.
Need implementation assistance?