Disable-CMAmtAuditLog
Disable-CMAmtAuditLog
Disables audit logging for Intel AMT-based computers.
Syntax
Parameter Set: SearchByNameMandatory
Disable-CMAmtAuditLog -DeviceName <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByIdMandatory
Disable-CMAmtAuditLog -DeviceId <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByValueMandatory
Disable-CMAmtAuditLog -Device <IResultObject> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Detailed Description
The Disable-CMAmtAuditLog cmdlet disables audit logging for Intel Active Management Technology (Intel AMT)-based computers. The audit log records authorized and authenticated out-of-band management activities performed on Intel AMT computers.
You can specify computers by using the Microsoft System Center 2012 SP1 Configuration Manager device name or device ID, or you can use the Get-CMDevice cmdlet to get a device object. If you want to delete the current log entries, use the Clear-CMAmtAuditLog cmdlet.
Parameters
-Device<IResultObject>
Specifies a device object. To obtain a device object, use Get-CMDevice.
Aliases |
InputObject |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceId<String[]>
Specifies an array of IDs of devices.
Aliases |
ResourceId |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceName<String[]>
Specifies an array of names of devices.
Aliases |
Name |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Force
Forces the command to run without asking for user confirmation.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Confirm
Prompts you for confirmation before running the cmdlet.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
Outputs
The output type is the type of the objects that the cmdlet emits.
Examples
Example 1: Disable audit logging for a device by using an ID
This command disables Intel AMT audit logging for a device that has the ID 16777230.
PS C:\> Disable-CMAmtAuditLog -DeviceID "16777230"
Example 2: Disable audit logging for named device
This command disables Intel AMT audit logging for a device named Accn023.Contoso.com.
PS C:\> Disable-CMAmtAuditLog -DeviceName "Accn023.Contoso.com"
Example 3: Disable audit logging by using a variable
The first command gets a device object by using the Get-CMDevice command, and then stores it in the $CMD variable.
The second command disables Intel AMT audit logging for the device in $CMD. The command uses the Force parameter. Therefore, it does not prompt you for confirmation.
PS C:\> $CMD = Get-CMDevice -Name "Accn023.Contoso.com"
PS C:\> Disable-CMAmtAuditLog -Device $CMD