Share via

Sentinel LAWS LAPS Event ID query help

Anonymous
2023-10-05T13:38:36+00:00

Hi Experts!

Good day!

I need your help on querying the events of LAPS rotation of a machine that is connected to a LAWS.

LAPS are rotating as per designed, but we need to check the specific logs.

I have tried WindowsEvent and SecurityEvent and filtered to yield results to show EventID 10020 or 10003.

Thank you in advance for your help!!

Windows Server Windows cloud

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-10-06T01:22:51+00:00

    Hello Kristobriel ClemsonPaylangco,

    Thank you for posting in Microsoft Community forum.

    To view the Windows LAPS event log channel, in Windows Server Event Viewer, go to Applications and Services > Logs > Microsoft > Windows > LAPS > Operational.

    For more information about Windows LAPS event ID and logs, you can check the information in the link below.

    Use Windows LAPS event logs | Microsoft Learn

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    0 comments