Audit Log for specific Powershell command: PSsession
Myron Agio
1
Reputation point
During our Security hardening, we need to audit if a domain admin tries to connect to any workstation using Powershell command Enter-PSSession.
I have checked for Event ID in event viewer but i did not find something.
Do you know any possible solution?
Thank you
Windows for business | Windows Server | User experience | PowerShell
Sign in to answer