locked
Event Viewer Security Logs - Failure Reason non-descriptive value - Powershell 2.0 RRS feed

  • Question

  • I am looking at doing some powershell scripting for errors in the Security Logs. If you look at any Audit Failure in the Security Logs and click on the Details tab, the FailureReason field has an non-descriptive value. Unknown user name or bad password for %%2313. I am wondering if there is a resource to match the non-descriptive value to the returned value in the General tab, Failure Information field or how Event Viewer is able to convert that non-descriptive value. If you know how it is able to convert that value then is there a way to access it via Powershell?
    Friday, June 17, 2011 5:00 PM

All replies

  • I still have not been able to find anything. If anyone has any idea on this, please reply.
    Monday, June 20, 2011 3:41 PM