Skip to content

KC's Blog

  • Home
  • About Me
  • Sitemap

event log

How To Get the Data Out of ReplacementStrings Properly

July 26, 2018July 26, 2018 Kent ChenMicrosoft
PowerShell - How To Get the Data Out of ReplacementStrings Properly

When retrieving data from the event log, there is a set of data stored in a data field called ReplacementStrings that is very useful to the certain types of log entries. It’s structured as a string array, therefore, can be retrieved if you know the data structure. The problem is, every type of event ID has different string array structure. […]

Read more

Gather Bad Password Attempts and Account Lockout Info in PowerShell

July 25, 2018July 25, 2018 Kent ChenMicrosoft
PowerShell

If a user account gets locked out, I can follow these tips to find out why and when it happened. But how can I check and gather lockout info along with the bad password attempts info of all users across the entire AD domain? Asking help from PowerShell is my answer. There are two places where we can gather this […]

Read more
  • image - Why Office 365 GPO Settings Don't Apply? And What To Do?
    Why Office 365 GPO Settings Don’t Apply? And What To Do?
  • PowerShell
    Taking Screenshots with PowerShell on Windows 10
  • image 7 - Fix Windows 10 20H2 Upgrade Error 0xc1900223 via WSUS
    Fix Windows 10 20H2 Upgrade Error 0xc1900223 via WSUS
  • image 3 - How To Connect-MsolService without Login Prompt
    How To Connect-MsolService without Login Prompt
  • directory synchronization - How To Convert A Cloud Account to Azure AD Synced Account in Microsoft 365?
    How To Convert A Cloud Account to Azure AD Synced Account in Microsoft 365?

KC's Blog

  • Home
  • About Me
  • Sitemap
Powered by WordPress | Theme: Astrid by aThemes.