AAL test

Email It to Me Print this Page
If you have already configured Administrator Audit Logging on your Exchange Server and still recieve the following in the Netwrix Auditor change reports:

"Administrator Audit Logging is not configured for the %Organization name% Exchange organization. Adjust the Administrator Audit Logging settings using the Active Directory Audit Configuration wizard, or manually as described in the Netwrix Auditor Installation and Configuration Guide:
http://www.netwrix.com/download/documents/Netwrix_Auditor_Installation_Configuration_Guide.pdf


Please perform the following test steps on the Netwrix host server using PowerShell:
  1. Create remote session: $ExSession = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri ‘http://%your exchange 2010 server FQDN%/PowerShell/’
  2. Check the session status: $ExSession
  3. Try to read AdminAuditLog: Invoke-Command -Session $Exsession -scriptBlock {Get-AdminAuditLogConfig }

If the session has been successfully created (steps 1 and 2 were successful), but step 3 returns an error, please try to check the AdminAuditLog content manually using the following cmdlet: Get-AdminAuditLogConfig.

If you get the following error:
PS C:\Users\%username%> Invoke-Command -Session $Exsession -scriptBlock {$AALC
onfig = Get-AdminAuditLogConfig }
The term 'Get-AdminAuditLogConfig' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
+ CategoryInfo : ObjectNotFound: (Get-AdminAuditLogConfig:String)
[], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

This error means that there is not enough rights to run this cmdlet: please check the service account rights assignment.
 
Was this information helpful?