$log = Get-Eventlog -LogName Security -before $endDate $4 = $log | Select-Object -first 1
PS C:\> $4
Index Time EntryType Source InstanceID Message
I want the text after 4672 "Special privileges assigned to new logon...."
When I attempt to use this method
The line of text I would like is missing.
Special privileges assigned to new logon.
I will guess I am missing some basic simple thing that I am over looking. I have spent quite a bit of time trying to figure this out help would be greatly appreciated.
Please see if below works for you.
Yup that works.
You must be logged in to reply to this topic.