search

EvotecIT / PSWinReporting

This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD Events.
MIT License
701 stars 69 forks source link

Error - no events were found that match for version 1.8.1.5 #60

Closed verkruemelt closed 2 years ago

verkruemelt commented 4 years ago

error

PrzemyslawKlys commented 4 years ago

Tnx for reporting. Will be fixed.

PrzemyslawKlys commented 4 years ago

But just so you know - this one seems like checking for events doesnt work for you. As far as i read the screenshot this code checks for a single event in log to see dates between each the log has logs. And in your case it fails so probably nothing to read which is weird. I’ll fix it to not error out but you should make sure you have access.

verkruemelt commented 4 years ago

I've tried with dom-admin directly on DC in elevated PS-Console.

Expected reports: Changed Group Membership Deleted Group

PrzemyslawKlys commented 4 years ago

Well did you actually enable auditing? They don't come by default.

verkruemelt commented 4 years ago

Auditing was the problem. Thank you! The error message still appears, but now I get events in the report. :)

PrzemyslawKlys commented 4 years ago

I still need to fix it :-)