Comments on: How To Get the Data Out of ReplacementStrings Properly https://www.kjctech.net/how-to-get-the-data-out-of-replacementstrings-properly/?utm_source=rss&utm_medium=rss&utm_campaign=how-to-get-the-data-out-of-replacementstrings-properly Tue, 24 Jan 2023 18:20:57 +0000 hourly 1 By: David Payne https://www.kjctech.net/how-to-get-the-data-out-of-replacementstrings-properly/comment-page-1/#comment-213649 Fri, 31 Jul 2020 22:52:30 +0000 https://www.kjctech.net/?p=4154#comment-213649 Thanks for this. Very helpful. One question: When looking at Event ID 4733 in Event Viewer, I can see an actual SAMAccountName for Member:Security ID in the General tab. However, when looking at the corresponding property in the Details tab, it shows a GUID. A GUID is also returned for the corresponding property when querying the record using Powershell.

I feel that the SAMAccountName is probably can be extracted from the record somehow because it needs to be displayed in the General tab even when an Active Directory domain is not available.

Do you know how to access the actual SAMAccountName using Powershell?

]]> By: max https://www.kjctech.net/how-to-get-the-data-out-of-replacementstrings-properly/comment-page-1/#comment-207037 Tue, 26 Nov 2019 11:17:44 +0000 https://www.kjctech.net/?p=4154#comment-207037 thank you, very much. Very clear

]]>