Get-WinEvent -FilterHashtable @{logname=’security’; id=4740} | fl
Keeping in mind, when you run from a DC, it’ll only list events on that DC. So if your account was locked out against a secondary site DC, perhaps it won’t show.
Get-WinEvent -FilterHashtable @{logname=’security’; id=4740} | fl
Keeping in mind, when you run from a DC, it’ll only list events on that DC. So if your account was locked out against a secondary site DC, perhaps it won’t show.
Leave a Reply
You must be logged in to post a comment.